Kibana 7.12.0 add Enrich pipeline

Elastic Stack Kibana
1

Hi,
I want to calculate the value of a field in index A.

  1. Its data comes from two other index fields, index B and index C.

  2. Calculation formula: index A.count = index B.count - index C.count.

  3. Condition: index A.time = index B.time, index B.time = index C.time.

Can it be achieved? Or any suggestions? :slightly_smiling_face:

2

Hi
What's not clear to me is: Are you speaking of 1 index, or are this multiple indices?

Best,
Matthias

3

Hi
They are multiple indexes.

4

For this case you would need to build you own custom tool, merging the data and ingesting it into a new index in Elasticsearch

5

Oh, maybe you could use the ingest pipeline enrich processor for that:

6

Hi
Arithmetic operators do not seem to be supported.

7

In 7.14 you can achieve this using lens formulas. Any plan to update?