A feature request - would really like the ability to enrich documents going through an ingest pipeline with fields from documents in another elasticsearch index. I’m sure this has many use cases, but for SIEM use, enriching IP addresses against threat intel. Thanks!

Feature request: enrich processor

janhoy November 15, 2021, 11:39am 6

FYI, I asked a similar question in the OpenSearch forum: Enrich processor

Topic		Replies	Views
Alternative for Enrich Processor OpenSearch feature-request	0	1223	October 13, 2022
Enrich processor OpenDistro	1	1664	November 15, 2021
Ingest pipelines support OpenSearch	4	1278	November 25, 2021
Ingest processor documentation General Feedback	1	455	April 16, 2023
[RFC] Search Pipelines Request For Comments discuss , feature-request , rfc	11	1315	July 22, 2023