"Join" search

Elastic Stack Kibana
1

Hi guys.

I have webserver-logs and application-logs in Elasticsearch. The webserver-log contains clientIP and SSL-cipher. The application-log contains clientIP and customer-name.
How can I do a visualisation-table showing customers and SSL-ciphers? The key to join on would obviously be clientIP.

Thanks.

2

You cannot do joins in ES/KB, you need to put the data together when you index things into ES.

3

What about parent/child relationships etc?

4

KB doesn't support them for the moment.