Sorry in advance for my bad english and my poor knowledge on ELK.
I need to import regularly a csv file like this :
|9722610||887||YEM78146||78146||6 January 2023||2023||1||Explosions/Remote violence||Remote explosive/landmine/IED||AQAP: Al Qaeda in the Arabian Peninsula|
|9722612||887||YEM78148||78148||6 January 2023||2023||1||Explosions/Remote violence||Remote explosive/landmine/IED||National Resistance Forces|
|9722613||887||YEM78149||78149||6 January 2023||2023||1||Battles||Armed clash||Military Forces of Yemen (2016-) Supreme Political Council|
|9722615||887||YEM78151||78151||6 January 2023||2023||1||Battles||Armed clash||Military Forces of Yemen (2016-) Supreme Political Council|
My first problem is the format of the date field "event_date". As you can see, the date is like "06 january 2023" but when I want to import it as a date field with Kibana (csv upload), I have an error during the upload process. Kibana cannot parse this field when I put the date type instead of a Keyword type.
My second problem is that I would like to find a way to apply (when I find the solution for the date field) a template to this file each time I want to import it with Kibana. I don't know if (and how) it's possible to apply a template (with the right types) to the upload csv process without changing manually the type of the date field.
UPDATE : I have found the problem with the date format, so now I have got a ingest pipeline in Kibana which can transform correctly the event_date field, but I have a field (actor1) which is recognized as a text field and I would like to store it in my index as a keyword field. Is it possible to do that in the ingest pipeline ?
Thx for your help.