Log data join

Elastic Stack Elasticsearch
1

Hi there,

I’ve got a question, is it possible to “join” data in ELK, so we have such a use case:

  1. Application sends two types of logs:

a. <session_id>, <cartridge_id>
b. <session_id>, <data_volume>

  1. We need report (table in Kibana):

a. <cartridge_id> <data_volume> <session_id>

Is it feasible in ELK?

Thanks alot

Li

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.