Compare values across two indicies

Elastic Stack Elasticsearch
1

Hi, i want to compare two fields in two indexes in elasticsearch and return a hit if they match. For example:

Index1:
-hostname: "computer"

Index2:
-host_name: "computer"

If hostname value equals to host_name value, I want it to return a hit.

The advanced version of this that i would like to achieve is:

Index1:
-hostname: "computer"
-last_seen: "13h"

Index2:
-host_name: "computer"

And return a hit if hostname=host_name and last_seen>12h

I was looking for the answer for a very long time and just can't get the solution. I was trying to use the watcher, but i am using free and open license. If anyone could help me i woul really appreciate it.

Thank you in advance.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.