Compare 2 tables and add matching field in second table to first table

gringo · January 9, 2016, 9:39am

How can I Compare 2 tables and add matching field in second table to first table. Not sure what query syntax should I use

Table 1

Field1
1020
1021
1022
1023
1025

Table2
Field1 FieldX
1021 "Good"
1023 "Bad"

Result
Table3
Field 1 FieldX
1020
1021 "Good"
1022
1023 "Bad"
1025

warkolm · January 10, 2016, 12:38am

Are you taking data from a database here?

gringo · January 10, 2016, 6:20am

The data is stored in elastic search. I am just using the term "tables" to illustrate my problem as I am still not very familiar with elasticsearch terms.

Assuming I have loaded the two "Tables" into elasticsearch. How should I write the query to accomplish the previously mentioned scenario?

warkolm · January 10, 2016, 9:03am

You probably mean an index then.

But no, you cannot do this within ES, you would need to do it in your application code.

gringo · January 11, 2016, 1:15am

I am looking at accomplishing this in the query as I am not sure if doing at the application code level will allow me to pass the result into Kibana.

Can I do this?

warkolm · January 11, 2016, 1:16am

Nope.

gringo · January 13, 2016, 5:20am

Thanks

gringo · April 6, 2016, 6:57am

Can I use logstash to input 2 index at one go and can try to match the contents of one index with the content of the other

warkolm · April 6, 2016, 7:47am

Maybe with a ruby script, or the fingerprint filter.