Hello there, Using an ingest pipeline, I am trying to uppercase the first char in a fieldname, for all fields under winlog.event_data: { "script": { "lang": "painless", "source": "ctx._source.winlog.event_data = ctx._source.last.replaceFirst(/[a-z]/, m ->\n m.group().toUpperCase…

Hi @DefensiveDepth , ctx is a Map of maps (and lists, depending on the document), so you can remove keys in place or replace the map entirely. For example: POST /_ingest/pipeline/_simulate?verbose=true { "pipeline": { "processors": [ { "script": { "lang": "painless", …

Painless Script in Ingest - Rename Field

Elastic Stack Elasticsearch

DefensiveDepth (Josh Brower) January 5, 2022, 1:03pm 2

Bump...

Topic		Replies	Views
Painless in Script Ingest Pipeline : Get fields name Elasticsearch painless , ingest-pipeline	1	437	January 6, 2022
Change all the fields to lowercase throw ingest pipeline Elastic Search painless	5	334	June 16, 2024
Painless script outputs literal "key" field Elasticsearch painless , ingest-pipeline	0	30	January 29, 2025
Unable to access field outside _source in Painless ingest processor Elasticsearch painless , ingest-pipeline	1	383	February 2, 2021
Script processor not adding a new field using ingest pipeline Elasticsearch painless , ingest-pipeline	2	423	October 16, 2023

Painless Script in Ingest - Rename Field

Related topics