namali  
                (mali)
               
                 
              
                  
                    August 23, 2019, 11:01am
                   
                   
              1 
               
             
            
              I wanted to know how to merge and transform more than one csv or json files to elasticsearch from logstash or ingest node pipeline.
*hotel.csv 
hotelcode 
hotelname 
starcode
*star.csv 
starcode 
starrating
after merge index should have 
hotelcode 
hotelname 
starcode 
starrating
             
            
               
               
               
            
            
           
          
            
              
                namali  
                (mali)
               
              
                  
                    August 25, 2019,  4:27am
                   
                   
              3 
               
             
            
              Thanks, I will try and see
             
            
               
               
               
            
            
           
          
            
              
                namali  
                (mali)
               
              
                  
                    August 26, 2019, 11:00am
                   
                   
              6 
               
             
            
              this works from translate. Thx
             
            
               
               
               
            
            
           
          
            
              
                namali  
                (mali)
               
              
                  
                    August 27, 2019,  5:24am
                   
                   
              7 
               
             
            
              this works when key field is in first column in dictionary_path data file. I want to know how to merge files when key field is not in first column
translate { 
destination => "[@metadata ][lookup1]" 
dictionary_path => "/home/namalie/elk/test/starrating.csv" 
field => "starcode" } 
dissect { mapping => { "[@metadata ][lookup1]" => "%{starrating}" } }
             
            
               
               
               
            
            
           
          
            
              
                system  
                (system)
                  Closed 
               
              
                  
                    September 24, 2019,  5:24am
                   
                   
              8 
               
             
            
              This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.