I have a data set which has a field that contain different values like:
FieldA : AAAA-REL
FieldA : AAAA-DEV
FieldA : BBBB-REL
FieldA : DDDD-REL
FieldA : BBBB-DEV
... and so on
I want to tag or categorize these fields by adding a tag or a new field and grouping them as say:
All fields that contain "AAAA*" , tag them as say "Prime"
All fields that contain "BBBB*" tag them as say "Secondary"
All that contain "CCCC*" tag them as say "Tertiary"
and so on. Note that the mapping could go on to ZZZZ.
I could use grok pattern for each of these, but looks like thats a lot of processing and would probablu impact the performance.
- Is there an easier way to do this mapping, like for ex have a file of patterns and then look it up before tagging?
- My logstash talks to elastic. Is there anything in elastic I could use to achieve this
- If not, I use Kibana. Can scripted field help for this scenario?