# A way better than rollup and transform

**URL:** https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747
**Category:** Elasticsearch
**Tags:** transforms
**Created:** [November 9, 2021, 11:12am UTC](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747 "2021-11-09T11:12:08Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![lstoneir](https://avatars.discourse-cdn.com/v4/letter/l/b9bd4f/32.png) [@lstoneir](https://discuss.elastic.co/u/lstoneir)
#### Post date: [November 9, 2021, 11:12am UTC](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747/1 "2021-11-09T11:12:08Z")

</div>

Hi there,  
Thanks a lot for your great and wonderful support team!

At first step we use rollup jobs for create hourly and daily aggregation of our data,  
but rollup indices dont support ILM! unfortunately.

At second step we use transforms for do same things, but when our field contains NULL value and we use it in GroupBy section the output of transform is NULL and empty!

is there any way to solve these problems? or is there a new way for aggregate stream data into another indices hourly and daily ?

---

<div class="post-metadata">

### Author: ![Hendrik\_Muhs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hendrik_muhs/32/25802_2.png) [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)
#### Post date: [November 10, 2021, 6:50am UTC](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747/2 "2021-11-10T06:50:29Z")

</div>

Regarding your transform configuration:

Per default documents with `null` values are ignored, however you can change this behavior if you set `missing_bucket` to `true`, see this [example](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-composite-aggregation.html#_missing_bucket).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 8, 2021, 6:51am UTC](https://discuss.elastic.co/t/a-way-better-than-rollup-and-transform/288747/3 "2021-12-08T06:51:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
