We currently use OSQuery to gather data about our laptops. The logs from these queries are shipped to Elasticsearch service in AWS using Filebeat and then visualisations are created in Kibana.
My question is, is it possible to update the values in a visualisation to have more readable and friendly names? for example, if the logs show the following:
osquery.result.column.model: MacBook Pro 11,3
Is it possible to update the MacBook Pro 11,3 to a different value in the visualisation within kibana or do you need to use Logstash before the logs hit Elastic to convert the value?
I found the following thread that suggests the above functionality was on the roadmap but i can't find any docs on how to perform these actions if they are now available features in Kibana.
Rename a field value in Kibanastrong text