Combined ID

Hi everyone,
i have data for two different clusters in which the respective nodes have the same name - eg. clustername: henry, nodenames: node1, node2, node3; clustername: joe, nodename: node1, node2, node3.
Now i want to create a visualisation in which the data is separated (e.g. separate chart) in the form clustername.nodename in one single visualisation.
I think I need a way to create a kind of combined ID from clustername.nodename. Does anyone have any idea how to do this in Kibana?

Thanks in advance

You should be able to do this with scripted fields.

Be aware that doing this can negatively affect performance - if this becomes a problem for you, you can try to create the joined field during ingest (e.g. using logstash or an ingest pipeline)

Perfect. Using scripted fields worked perfectly for me. Thank you! :grinning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.