Merging Fields from Different Types

Elastic Stack Kibana
1

I have one index with two _type , how can I pull fields from one _type value into a record from another _type value if a match is found?

For example:

I want to add the vendor value from:
_type: device_data vendor

to

_type: network

when the mac address matches

2

Are you wanting to join the data?

3

I understand that "joins" aren't supported (based on searching the forums), but I'm trying to figure out how to pull data from other _types when there is a common field (such as mac address) between the documents. Is there a way to do this?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.