Compare three different fields from two different indices in a watcher

Hello,

I have two indice on elastic search and i would like to compare it on a watcher.

I have from one index the spot field :
"hits" : [
{
"_index" : "mktdata-2020.01.25",
"_type" : "_doc",
"_id" : "Ue883W8BBSmqUyPKwncF",
"_score" : 1.0,
"_source" : {
"oned" : 3.0,
"twod" : 5.0,
"@timestamp" : "2020-01-25T15:05:43.690Z",
"spot" : 1.0
}
}
]
and i have from another index the lbound and ubound:

"hits" : [
  {
    "_index" : "price-request-2020.01.25",
    "_type" : "email",
    "_id" : "Uu8-3W8BBSmqUyPKQnfN",
    "_score" : 1.0,
    "_source" : {
      "subject" : "price request",
      "lbound" : "0",
      "@timestamp" : "2020-01-25T15:07:09.000Z",
      "ubound" : "2"
    }
  }
]

I want to check if the spot field value is between the lbound and ubound fields value in a watcher during the time i am running my multiplepipelines with logstash:
Does anyone know how to make it?

Thank you in advance
Pierre Jutard

Final solution:

image

Thanks
Pierre Jutard

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.