# Facets based on membership data

**URL:** <https://discuss.elastic.co/t/facets-based-on-membership-data/16319>\
**Category:** Elasticsearch\
**Created:** [March 12, 2014, 12:21pm UTC](https://discuss.elastic.co/t/facets-based-on-membership-data/16319 "2014-03-12T12:21:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mobcdi](https://avatars.discourse-cdn.com/v4/letter/m/e480ec/32.png) [@mobcdi](https://discuss.elastic.co/u/mobcdi)\
**Post date:** [March 12, 2014, 12:21pm UTC](https://discuss.elastic.co/t/facets-based-on-membership-data/16319/1 "2014-03-12T12:21:04Z")

</div>

I'm still getting my head around all things elastic but I was wondering if  
elasticsearch is able and suitable to provide faceted search in this example

Say I import the logs from a server and want to match the username field  
with additional data like role membership (user, super-user, admin, domain  
admin) which isn't necessarily kept in elastic search for reasons of  
security.

Would it be possible to have facets that use the membership hierarchy so I  
could only return the super-users found in the server logs but ES would  
query an external system for the actual userids that are members of that  
role?

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5a10ce36-777c-45fd-8b29-5287e0601fc8%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5a10ce36-777c-45fd-8b29-5287e0601fc8%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Binh\_Ly\_2](https://avatars.discourse-cdn.com/v4/letter/b/d07c76/32.png) [@Binh\_Ly\_2](https://discuss.elastic.co/u/Binh_Ly_2)\
**Post date:** [March 12, 2014, 2:30pm UTC](https://discuss.elastic.co/t/facets-based-on-membership-data/16319/2 "2014-03-12T14:30:28Z")

</div>

Unfortunately, an external lookup like you describe is not currently  
supported. For now, you'll need to pull data into ES to perform all  
faceting/aggregations.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/3eeae6b2-84c5-4881-a0b0-6df1abf85d23%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3eeae6b2-84c5-4881-a0b0-6df1abf85d23%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:43am UTC](https://discuss.elastic.co/t/facets-based-on-membership-data/16319/3 "2017-07-06T01:43:46Z")

</div>

Closed on July 6, 2017, 1:43am UTC


