Correlate index with field

Elastic Stack Kibana
1

Hi!

I am using Elasticsearch in order to store data and Kibana for visualization of them.
The index pattern of Elasticsearch is in the form of "data-YYYY-MM-DD", so in a Search in Kibana I have defined as index pattern "data*" and respectively there is a field in kibana _index (format: data-YYYY-MM-DD, type: string).
There is also a field "data_time" (type: date, format:YYYY-MM-DDTHH:MM:SS).
I was wondering if there is a way to "connect" those two fields, that is when I am filtering with a specific dayAndTime (e.g. 2019-11-23T08:50:19 ), not to search all the fields "data_time" of all elasticsearch indices but to search only index "data-2019-11-23".

2

Hi @Voula_Mikr. I do not think there is an easy way to do this. However, I am curious what the performance benefit is? Have you tried benchmarking your query on in Elasticsearch for a single index versus an index pattern?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.