Join Id and Name

[Samuele_Lolli]

Hi everyone,
im parsing with logstash some message containing an ID refering to an user, i need to add the name of the user with the specific ID. I have all the User and ID in a CSV file.
Which one is the best way to add the name corrisponding to the id in my index?
Thank you in advance

[Rios]

You can use the translate plugin. Try with this:

      translate {
	    field => "[userid]"
	    dictionary_path => "/path/file.csv"
	    target => "username"
	    exact => true
      }

The file.csv need to have the head with userid, username.
userid, username
test, test@domain.com

[Samuele_Lolli]

Hi @Rios,
thank you! I'm gonna try it soon but i think that can be the solution!