Combined ID

Elastic Stack Kibana
1

Hi everyone,
i have data for two different clusters in which the respective nodes have the same name - eg. clustername: henry, nodenames: node1, node2, node3; clustername: joe, nodename: node1, node2, node3.
Now i want to create a visualisation in which the data is separated (e.g. separate chart) in the form clustername.nodename in one single visualisation.
I think I need a way to create a kind of combined ID from clustername.nodename. Does anyone have any idea how to do this in Kibana?

Thanks in advance
denim

2

You should be able to do this with scripted fields.

Be aware that doing this can negatively affect performance - if this becomes a problem for you, you can try to create the joined field during ingest (e.g. using logstash or an ingest pipeline)

3

Perfect. Using scripted fields worked perfectly for me. Thank you! :grinning: