Is it possible combine two index together in Kibana

AKumar123 · August 25, 2020, 6:48pm

I have two index data which i am using in kibana.For that I created Visulazation as well and able to see Data in dashboard.

But challange is when i am filtering data for Index1 after clicking on +Button other index data is not appearing,Same thing is happening for Index2 as well.

Is it possible to combine both the index together.

AKumar123 · August 25, 2020, 7:01pm

AKumar123 · August 25, 2020, 7:03pm

mattkime · August 25, 2020, 7:31pm

Hello @AKumar123

Is the field and value available in both data sets?

Could you show the config for each visualization?

AKumar123 · August 25, 2020, 7:38pm

AKumar123 · August 25, 2020, 7:40pm

Value is same in both the Data Set,But Field name is different.If I make field name same it replaces the values.

I combine both the indexes with index* also..

mattkime · August 25, 2020, 7:48pm

I'd recommend creating a field alias on one index so that both sets of data can use the same field name - https://www.elastic.co/guide/en/elasticsearch/reference/master/alias.html

AKumar123 · August 25, 2020, 7:51pm

can not create one Index becasue other data coming from different system.

mattkime · August 25, 2020, 8:02pm

Then you need to write an OR query that addresses both fields.

AKumar123 · August 26, 2020, 9:24am

what is OR Query how can we achieve in UI Level

mattkime · August 26, 2020, 11:48am

Use the search bar - fieldname: value OR fieldname: value

AKumar123 · August 26, 2020, 12:06pm

search is working fine for both indexes.Filter not working.

mattkime · August 26, 2020, 2:27pm

You need to click 'edit query dsl' - this PR has examples - https://github.com/elastic/kibana/pull/5109#issuecomment-151600967

system · September 23, 2020, 2:27pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.