Multiple field names into single field name in elasticsearch

Hi all,

I'm working on a project where we need to a field to read multiple field names as same field name.
Is there a way where we can configure multiple field names into one field using some method?

For example, we have a field "Name". In another index, data field may be "User-Name" and in another index . I want field "General Name" to read both field names "Name" & "User-Name" as same field "General-Name"

Is it possible by having some filters in logstash?

Within Elasticsearch you can take a look at the Alias field type | Elasticsearch Guide [7.13] | Elastic

you could also have filters in logstash renaming those fields, but that would only apply for newly indexed data.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.