How to push two inputs data as a single event(docment) in logstash.yml

Elastic Stack Logstash
1

Hi.....all
How can i push two inputs data as a single event(docment) in logstash.yml
For example
I have two indexes that must be separated:

// index = `order_item`
{
    "ID": 1,
    "Name": "Shoes",
    "Price": 9.99,
    "OrderID": 82
},{
    "ID": 1,
    "Name": "Hat",
    "Price": 19.99,
    "OrderID": 82
}

// index = `order`
{
    "ID": 82,
    "Customer": "John Smith"
}
How would I join these two tables on a single index such that entire data should be on single event:

results = {
    "ID": 1,
    "Name": "Shoes",
    "Price": 9.99,
    "Order.ID": 82,
    "Customer": "John Smith"
},{
    "ID": 1,
    "Name": "Hat",
    "Price": 19.99,
    "Order.ID": 82,
    "Customer": "John Smith"
}
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.