A feature request - would really like the ability to enrich documents going through an ingest pipeline with fields from documents in another elasticsearch index. I’m sure this has many use cases, but for SIEM use, enriching IP addresses against threat intel. Thanks!

Feature request: enrich processor

janhoy November 15, 2021, 11:39am 6

FYI, I asked a similar question in the OpenSearch forum: Enrich processor

Topic		Replies	Views
Alternative for Enrich Processor OpenSearch feature-request	0	1514	October 13, 2022
Ingest pipelines support OpenSearch	4	1436	November 25, 2021
Enrich processor OpenDistro	2	1945	January 21, 2025
Enrich Policy api in not working OpenSearch	1	818	November 3, 2023
Ingest processor documentation General Feedback	1	479	April 16, 2023