Filtering documents with another index

[Andrea_Bozzano]

Hi everyone, and thank you for your time reading this.

I'm having two indexes, let's think of those, for sake of semplicity, as:

• index1: log content file
• index2: list of hostnames

Now, I developed a dashboard in Kibana to have some visualizations on index1.
Suppose that you want to see the content of index1 for the hostnames in index2. Is it possible to do that in Kibana? If yes, how can I setup, for example, a global filter or a dropdown menù to filter the data of index1 with the property hostname of index2?.
They have a common property, let's call it "hostname".

Thank you for every answer or hint, it will be appreciated

Ciao!

[jsanz (Jorge Sanz)]

The Controls panel does exactly that.

Make dashboards interactive | Kibana Guide [8.2] | Elastic

You don't need to provide a second index, since the control will check for the available values for hostname in index1 and offer them as options.

See a quick demo with the Kibana Sample Data Flights index.

But if for whatever reason you need to get more control on what is exposed in the list, you can simply point the control to index2 instead and it will work as well if the fields are named equally. I would not recommend this option, though.