How to create outlier jobs with data fields coming from multiple sources (log1,log2, metricbeat1, etc....)

This is being discussed in a separate thread here: How to aggregate multiple events coming from different logs with slight different timestamp, when the only field is timestamp to combine those? - #4 by richcollier