Multiple field names into single field name in elasticsearch

Elastic Stack Elasticsearch
1

Hi all,

I'm working on a project where we need to a field to read multiple field names as same field name.
Is there a way where we can configure multiple field names into one field using some method?

For example, we have a field "Name". In another index, data field may be "User-Name" and in another index . I want field "General Name" to read both field names "Name" & "User-Name" as same field "General-Name"

Is it possible by having some filters in logstash?

2

Within Elasticsearch you can take a look at the Alias field type | Elasticsearch Guide [7.13] | Elastic

you could also have filters in logstash renaming those fields, but that would only apply for newly indexed data.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.