# Normalizing Fields
**URL:** https://discuss.elastic.co/t/normalizing-fields/333544
**Category:** Beats
**Tags:** filebeat
**Created:** [May 16, 2023, 9:06am UTC](https://discuss.elastic.co/t/normalizing-fields/333544 "2023-05-16T09:06:49Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Felkio](https://discuss.elastic.co/u/Felkio)
#### Post date: [May 16, 2023, 9:06am UTC](https://discuss.elastic.co/t/normalizing-fields/333544/1 "2023-05-16T09:06:49Z")
Hello,
we are currently using wazuh in conjunction with ELK stack 7.17.9, we would like to gradually switch to the full elastic stack, but to do this we would first like to normalize the fields that wazuh sends to elasticsearch in the ECS.
I've seen the function in Kibana "Ingest Pipelines," and created one suitable for the purpose, but unfortunately I can't figure out how to implement it.
From what I understand, I should connect the wazuh pipeline (filebeat) to this pipeline, before doing the ingest inside elastic. However, I don't quite understand HOW to do it.
Can you kindly help me?
Thank you very much.
Francesco
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 18, 2023, 12:02am UTC](https://discuss.elastic.co/t/normalizing-fields/333544/2 "2023-05-18T00:02:30Z")
Welcome to our community! 😃
Take a look at [Parse data using an ingest pipeline | Filebeat Reference [8.7] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/8.7/configuring-ingest-node.html).
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 15, 2023, 12:03am UTC](https://discuss.elastic.co/t/normalizing-fields/333544/3 "2023-06-15T00:03:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.