"Join" search

Elastic Stack Kibana
#1

Hi guys.

I have webserver-logs and application-logs in Elasticsearch. The webserver-log contains clientIP and SSL-cipher. The application-log contains clientIP and customer-name.
How can I do a visualisation-table showing customers and SSL-ciphers? The key to join on would obviously be clientIP.

Thanks.

#2

You cannot do joins in ES/KB, you need to put the data together when you index things into ES.

#3

What about parent/child relationships etc?

#4

KB doesn't support them for the moment.

#5