Hi All, Am trying to add another field in elasticsearch from the winlogbeat the event id to tier corresponding names but I couldn't execute it filter { if "Security" in [log_name] { translate { dictionary => [ "4624", "Successful logon", "4647", "User initiated logoff", …

[image] Raj_Kumar: so do you mean this will work I believe so.

Logstash - event id to name

Raj_Kumar (Raj) April 3, 2018, 7:42am 12

Thank you for the reply, i will try it out

Topic		Replies	Views
Logstash Translate Dictionary not working Logstash	17	1241	June 18, 2020
Add field from csv to event log send by logstash Logstash	24	3542	April 13, 2017
Error translation event_id Logstash	3	384	August 5, 2019
Translate Filter Destination Beats	9	956	June 24, 2018
Translate multiple fields in an event Logstash	5	4323	April 13, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash - event id to name

Related topics