Rename processor
Use the Rename processor to change the name of a field, moving its value to a new field name and removing the original.
To use a rename processor:
- Select Create → Create processor.
- Select Rename from the Processor menu.
- Set Source Field to the field you want to rename.
- Set Target field to the new name you want to use for the Source Field.
This functionality uses the Elasticsearch Rename processor internally, but you configure it in Streamlang. Streamlang doesn't always have 1:1 parity with the ingest processor options and behavior. Refer to Processor limitations and inconsistencies.
In YAML mode, configure the rename processor using the following parameters. For the complete Streamlang syntax, refer to the Streamlang reference.
| Parameter | Type | Required | Description |
|---|---|---|---|
from |
string | Yes | Source field to rename. |
to |
string | Yes | New field name. |
ignore_missing |
boolean | No | When true, skip this processor if the source field is missing. |
override |
boolean | No | When true, allow overwriting an existing target field. |
- action: rename
from: attributes.old_name
to: attributes.new_name