Join Id and Name

Hi everyone,
im parsing with logstash some message containing an ID refering to an user, i need to add the name of the user with the specific ID. I have all the User and ID in a CSV file.
Which one is the best way to add the name corrisponding to the id in my index?
Thank you in advance

You can use the translate plugin. Try with this:

      translate {
	    field => "[userid]"
	    dictionary_path => "/path/file.csv"
	    target => "username"
	    exact => true

The file.csv need to have the head with userid, username.
userid, username

1 Like

Hi @Rios,
thank you! I'm gonna try it soon but i think that can be the solution!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.