Vlookup type of thing

Elastic Stack Kibana
1

I generate a table of MAC addresses in Kibana. However I’d like to translate the MAC address into a readable name. The MAC, Readable name table is and will forever be static and have and will forever have 50 rows.

What’s the simplest way to make that translation in Kibana?

The translation only has to be done when the table is drawn in the dashboard, no relationship with it ELK will benefit from the Readable name.

=vlookup(MAC;MacReadableNameTable;2;False)

Thank you very much for your support.

2

One way is you can write a scripted field which can rename your MAC address
Other way you can go about is try to install a plugin for vlookup which is available in Github.

Regards

3

You can create a static lookup within the index pattern field Management.

4

Or use enrich your documents when indexing with an enrich processor do that data would be available wherever you used it.