Is that Elastic way? [beginner question]

I’m newbie in Elastic and right now creating my first project.
I have an index where I store data from logstash. It storing devices metrics, and have device ID. Also I plan to create new index and store another data (data from third party service). I plan to create 3rd index where I will connect device ID and data from 2nd index, because I need aggregated data.

Is it right way to organise data in elastic? Can I in future make cross-indexes requests?

Thank you

To make it easier to query across indexes, I would suggest having a prefix for the indexes you plan to query this way.

Something like:


That way you can easily query across indexes with:

1 Like

thank you

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.