Join Id and Name

Elastic Stack Logstash
1

Hi everyone,
im parsing with logstash some message containing an ID refering to an user, i need to add the name of the user with the specific ID. I have all the User and ID in a CSV file.
Which one is the best way to add the name corrisponding to the id in my index?
Thank you in advance

2

You can use the translate plugin. Try with this:

      translate {
	    field => "[userid]"
	    dictionary_path => "/path/file.csv"
	    target => "username"
	    exact => true
      }

The file.csv need to have the head with userid, username.
userid, username
test, test@domain.com

1 Like
3

Hi @Rios,
thank you! I'm gonna try it soon but i think that can be the solution!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.