Add new field in Kibana based off condition

Hi all,

Need to have a quick compare of 2 index's ,

Example: index1 have columns a,b,c index 2 also have same columns a,b,c, now I want to create a new column "d" if the condition index1.a == index2.a, if equal the value in "d" will be 1 else 0 hence I could split and bucket the values based off "d" in visualization.

Appreciate your inputs on the same.

You should be able to do this with the Enrich Processor.

You would match on field a and for all records that matched set target_field to 1.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.