Add new field in Kibana based off condition

Elastic Stack Kibana
1

Hi all,

Need to have a quick compare of 2 index's ,

Example: index1 have columns a,b,c index 2 also have same columns a,b,c, now I want to create a new column "d" if the condition index1.a == index2.a, if equal the value in "d" will be 1 else 0 hence I could split and bucket the values based off "d" in visualization.

Appreciate your inputs on the same.

2

You should be able to do this with the Enrich Processor.

You would match on field a and for all records that matched set target_field to 1.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.