How to compare hostname field in two index and create a new fild with boolean value

New to ES, i need to compare hostname field in two index and output the result to index3 whether it is available in index2 and index2 with the hostname field.

pls guide me how to achieve it. Requirement to compare endpoint (hostname) availability in three tools ( sccm, nagios,bmc)- [These data are already populated to ES in separate index].

host1 yes no yes
host2 no yes no

You can't do that automatically. You need to do that manually I'm afraid.

So get all the documents from one index and for each run a search on the other indices.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.