# Combining rows into one in Kibana

**URL:** <https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294>\
**Category:** Kibana\
**Created:** [September 20, 2018, 1:02pm UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294 "2018-09-20T13:02:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ashootosh\_Bhardwaj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashootosh_bhardwaj/32/43807_2.png) [@Ashootosh\_Bhardwaj](https://discuss.elastic.co/u/Ashootosh_Bhardwaj)\
**Post date:** [September 20, 2018, 1:02pm UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294/1 "2018-09-20T13:02:53Z")

</div>

Hi, I have different types of data coming from 3 different servers.  
Server One gives me : ID, StartTime1, EndTime1  
Server Two Gives me : ID StartTime2, EndTime2  
Server Three gives me: ID, StartTime3, EndTime3

In Elastic Search I am sending data as Logs\_Server1, Logs\_Server2 and Logs\_Server3 and I created Index Logs\* which now has all the data.

I would like to know if there is a way to combine this data? So that I can see it like below in Kibana:

ID, StartTime1, StartTime2, StartTime3, EndTime1, EndTime2, EndTime3.

Everything in a single row for Single ID?

Regards,  
Ashootosh

---

<div class="post-metadata">

**Author:** ![Ashootosh\_Bhardwaj](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashootosh_bhardwaj/32/43807_2.png) [@Ashootosh\_Bhardwaj](https://discuss.elastic.co/u/Ashootosh_Bhardwaj)\
**Post date:** [September 21, 2018, 1:43am UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294/2 "2018-09-21T01:43:25Z")

</div>

I will really appreciate any help or direction to resolve this problem!

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [September 22, 2018, 3:31am UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294/3 "2018-09-22T03:31:21Z")

</div>

This looks kind of like what a left join would do in SQL, which Elasticsearch does not support. If ID is a shared key across multiple documents, what you could do is aggregate on all the IDs and get information like how much data exists per ID or some stats per ID, such as min start time or max end time.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 20, 2018, 3:31am UTC](https://discuss.elastic.co/t/combining-rows-into-one-in-kibana/149294/4 "2018-10-20T03:31:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.