Is it possible to use some external data source to augment visualizations in kibana? Say I have logs, and each log has an ID field, and I want to use my external API to add an email address associated with that ID to the Data Table visualization. Or maybe this is not the right way to do it at all, in which case what would be the right way?
Hey @HisShadow,
Up front, there isn't a way out of the box to make this happen. I have a couple of ideas though, depending on how technical you're willing to get. In general though, the best way to implement this would be to get the email address into your Elasticsearch indices, so that Kibana doesn't have to perform this lookup on the fly:
- If you're able to use Logstash, you could add an http filter to perform this lookup before the data in ingested into Elasticsearch. That way, the data is already available by the time it gets to Kibana.
- If you're not able to use Logstash, or if the email address is subject to change after being indexed, you could consider writing a custom Kibana visualization which is capable of performing this lookup.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.