PUT /_ingest/pipeline/solution
{
"description" : "split and index csv files from solution",
"processors" :
[
{
"csv":
{
"field": "message",
"target_fields":[
"@timestamp",
"lots of fields.....",
"even more fields"
]
},
"enrich":
[
{
"policy_name": "vehicle-database-policy",
"field" : "vehicle.rfid.id",
"target_field": "vehicle-db",
"max_matches": "1"
},
{
"policy_name": "axle-database-policy",
"field" : "axle.axle-position",
"target_field": "vehicle-db",
"max_matches": "1"
}
],
"set" :
{
"field" : "site.geoloc_point",
"value" : "{{site.geoloc.lat}}, {{site.geoloc.lon}}"
}
}
],
"on_failure" : [
{
"set" : {
"field" : "error",
"value" : " - Error processing message - "
}
}
]
}