Hi,

I saw the ES explenation to do "JOIN" in ES, but I am confused and I think I have a complicated case, so will be happy for more help.

First I will lay out my problem:

I have about 5 logs that represent 5 stages in a process (for SQL this is like having 5 tables). In all the logs I have the same UID. In all the logs I have the parameters but the parameters that irrelevant for stage one is or "0" or an empty String.

Here is a general picture:

Log a:

A: 5 , B: 0 ,C: , D:0 , E:0 , UID: xyz

Log b:

A: 0 , B: 8 ,C: , D:0 , E:0 , UID: xyz

Log c:

A: 5 , B: 0 ,C: 9 , D:0 , E:0 , UID: xyz

Log d:

A: 5 , B: 0 ,C: , D:2 , E:0 , UID: xyz

Log e:

A: 5 , B: 0 ,C: , D:0 , E:4 , UID: xyz

I want as a result:

A: 5 , B: 8, C 9, D: 2, E: 4, UID:“xyz”