A feature request - would really like the ability to enrich documents going through an ingest pipeline with fields from documents in another elasticsearch index. I’m sure this has many use cases, but for SIEM use, enriching IP addresses against threat intel. Thanks!

Feature request: enrich processor

janhoy November 15, 2021, 11:39am 6

FYI, I asked a similar question in the OpenSearch forum: Enrich processor

Topic		Replies	Views
Alternative for Enrich Processor OpenSearch feature-request	0	894	October 13, 2022
Enrich processor OpenDistro	1	1373	November 15, 2021
Ingest pipelines support OpenSearch	4	1008	November 25, 2021
Ingest processor documentation General Feedback	1	316	April 16, 2023
[RFC] Search Pipelines Request For Comments discuss , feature-request , rfc	11	1145	July 22, 2023