Compare common value in 2 documents within a index and create a field in documents

Elastic Stack Kibana
1

I have metricbeats configured to send process and services metrics to kibana.

Process and windows services have a common field i.e., pid . My requirement is to create a TSVB that will show memory utilization of all windows services. But unfortunately, utilization related metrics are exported from process module but not windows module.

So, I thought of creating a new scripted field that will compare common pid value in both process documents with service documents and create a field "Name_From_Service" with windows.service.name field from services document.

I don't have idea on painless script to create this field. Kindly help me with this. Thanks in advance.

2

You should take a look at Painless Lab inside of Dev Tools.

Further info - https://www.elastic.co/guide/en/elasticsearch/painless/current/painless-walkthrough.html

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.