Link DATE field to another one

Elastic Stack Elasticsearch
#1

Hello!

I've a index that contains document with a specific (unchangeable) mapping, and another index that use a data field with name "created_at" to organize and view data by date.
I have created an alias for the second index that point to the first one, but the difference between the name of two data fields of the indices does not allow to sort the data of the first one.

There is a way to specify (to the second index) that data field have a different name than "created_at", without modify the mapping?

Thanks.

T.

#2

Not really sure what you mean by this. Could you describe your problem a bit more clearly?

#3

Thanks for your reply, i Will try to detail my problem.
The indices have similar (but not the same) mapping, the first one is used to store all document, and the second is used by an analizing tool. To avoid duplicated data on indices , I created an alias with the same name on both indexes , so that the second index has visibility of the data contained in the first.
Now I can see data from my analizing tool, but i'm unable to organize it by date Field, because kibana use a Field named "created_at", while my data index use a field with another name. Well, i need to "link" this fields.

Thanks!

#4

Do you have control over at least one of the indices? Can you change its mapping and reindex data?

#5

Yes, I have control of both indexes, but I can not change the mapping of what stores documents. Instead, I can update the second one, but i need to mantain the "created_at" field.

Thanks.

EDIT: the index used by the analytical tool not contains any data, then a reindex operation is unuseful.

#6

Which analytical tool are we talking about? If it is Kibana, you can choose another field there, it doesn't have to be called created_at. I don't understand the purpose of having the second empty index. Could you explain it?

#7

Yes, sorry! You are right! simple solution!
Thanks!

#8