Is it possible to perform an operation on fields from two different indexes?

Elastic Stack Elasticsearch
1

These are my indexes:

stage-api-athena-fruitcount:

  • upload_time
  • [other fields]

stage-cloudwatch:

  • Timestamp
  • [other fields]

I want to perform the following action. Is it possible to do this operation on two separate indexes using either Kibana or Elasticsearch?

Timestamp - upload_time

2

Bump

3

I am still looking for an answer.

4

Elasticsearch does not support joins, which what you are suggesting seems to be.

5

What if the two fields were in the same index. Would subtract operation be possible?

6

That is generally still a join, so not possible.

7

I see, but I read something about script fields before. Have you used them? Do you think it would be useful in this scenario?

8

Scripts and scripted fields run in the context of a single document, so I do not see how it would help here. If you have a unique identifier that links these two entries, create a document with that as an ID and then update it so you get all data in a single document.

1 Like
9

By identifier, do you mean fields that are the same in both indexes? The two indexes both have customer_id and farm_id which are the same.

10

If that is what links them, then concatenate them and use that as a document id.

11

Thanks for your suggestion, I will look into this solution.

12

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.