Value change in Kibana

I have defined my index pattern somewhat to be:
%{TIMESTAMP_ISO8601:record_time} %{IP:app-ip} %{NUMBER:time-taken}" }

I get the app-ip as IP. Now, I know that each app-IP also has an app-Name. I have the app-IP, app-Name dictionary as a separate excel sheet.

Suppose - Thor - Captain

Now in kibana, I want to it to display the name of the app-IP.

Is there any way to do this mapping in ELK? In Kibana or anywhere?

You could do that mapping using a translate filter in logstash.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.