# Machine Learning Multiple Split Data Fields

**URL:** <https://discuss.elastic.co/t/machine-learning-multiple-split-data-fields/144344>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [August 14, 2018, 11:57am UTC](https://discuss.elastic.co/t/machine-learning-multiple-split-data-fields/144344 "2018-08-14T11:57:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ryanrossiter](https://avatars.discourse-cdn.com/v4/letter/r/a9a28c/32.png) [@ryanrossiter](https://discuss.elastic.co/u/ryanrossiter)\
**Post date:** [August 14, 2018, 11:57am UTC](https://discuss.elastic.co/t/machine-learning-multiple-split-data-fields/144344/1 "2018-08-14T11:57:02Z")

</div>

Hi I'm working on creating Machine Learning jobs and was wondering if there is any way to use multiple fields in the "Split Data" field? I ask this because I would like one series to represent an individual node, but multiple sites have the same node name so the data should be split by site and then by node name.

If this is not possible would a solution be to create a scripted field that contains "site.node\_name" and then split on that?

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [August 14, 2018, 1:45pm UTC](https://discuss.elastic.co/t/machine-learning-multiple-split-data-fields/144344/2 "2018-08-14T13:45:00Z")

</div>

When using an Advanced Job (or using the API), you can specify both a `partition_field_name` and a `by_field_name` in the same detector and that effectively does a "double split".

Another option is indeed to create a scripted field that is the concatenation of two other fields, then split on that.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 29, 2018, 10:04pm UTC](https://discuss.elastic.co/t/machine-learning-multiple-split-data-fields/144344/3 "2018-10-29T22:04:23Z")

</div>


