Kibana Vlookup Equivalent

Elastic Stack Kibana
1

Hi all,

I have 2 indices in an index pattern.
I want to see what are the documents which have the same fields values in both indices.
Basically like vlookup in excel.

I've tried a scripted field, but not getting approach of comparing and getting values from other document.

Any hint?

2

Hi @Sandeep_Raju. Can you show an example of the documents you are trying to compare? Also can you show an example of the scripted field you tried?

3

Another idea - to do this sort of VLOOKUP (database lookup join) is to enrich the data as it comes in (as it's indexed) or enrich the data after the fact by updating those documents.

1 Like
4

Graham's comments are how we usually approach this in our stack.

5

Enrich processor works in Elasticsearch, but i'm using Opendistro.
It doesn't work in Opendistro.
Any ideas for Opendistro?

6

You'd need to ask aws, as it's their product.

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.