Datatable from two different documents but one common field

Elastic Stack Elasticsearch
1

Hi,

I have two documents as shown below in same index/module but different fileset

Document 1:

Col1 Col2 Col3
a1 b1 c1
a2 b2 c2

Document 2:

T1 T2 T3
123 456 c1
111 222 c2

Now, I need to have the data table as follows

MyCol1 MyCol2 MyCol3 MyCol4
a1 b1 c1 123
a2 b2 c2 111

Is this feasible? I'm fine to have new index creation, or new ingesting pipeline or whatever. Please suggest.

If not possible, what would be the best way to achieve such kind of result by still using ELK and Kibana tools?I believe this is kind of normal functionality expected by lot of people.

2

I don't think there is a way to this in ELK So, we did some data modelling with the input files.

In our case, we are having two input files and we merged them together before publishing to ELK. Thus, the output file contains all of these columns. We have to be careful while merging though!

3

That's IMO the way to go.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.