Aliases for 5 fields in 5 indices

[Sandeep_Raju (Sandy)]

Hi all,

I have 5 indices : ( indices a1, a2, a3, a4, a5) with 5 different fields : Merchant_Id, Mer_Id, Merc_Id, MERCHANT_Id, MERCH_ID.

For some reasons, I cannot delete or alter the field or data.

I want to create an alias data type so that in my visualization for Index pattern a* for all indices, I want to use a common field Merchant_Id which shows all 5 fields Merchant_Id, Mer_Id, Merc_Id, MERCHANT_Id, MERCH_ID. in a single data column.

I've tried alias but it says cannot give alias for an already mapped field.

Any ideas or other turnarounds?

[JLeysens (Jean-Louis Leysens)]

Hi @Sandeep_Raju , not sure which version of the stack you're using, but this sounds like something you can achieve with runtime fields:

Runtime fields | Elasticsearch Guide [7.17] | Elastic

[Tomo_M (Tomohiro Mitani)]

As the error says, if index contains "Merchant_Id" field, you can't creat alias mappings of the same name. Does each index have only one of the 5 fields? If so, creat alias for that single field of indices which contains other than Merchant_Id.

If you indices contains mixture of the fields, I suppose runtime field is a good way as @JLeysens says.

Or copy_to paramter is also another option.