Perfomance/Best Practice Question: Translate plugin vs ES Plugin

Elastic Stack Logstash
1

Hi All,
I have to enrich in LS data related to phone calls events based on prefixes of the of the from number (A number) and of the to number (B Number)

I have two options

  • Using translate filter plugin
    I need 5 YAML files with diferent information, therefore I use 5 times the translate plugin

or

  • Ingest the "enrichment" data into another index and use the ES filter plugin to fetch the data at once and add it to every event.

Which way is best or has better performance?

Thank you very much in advance
Regards
Ana

2

Translate stores data in memory and should be faster as it avoids a lot of expensive network round trips.

1 Like
3

Thank you Christian
Regards
Ana

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.