# Multi level Transform with Elasticsearch

**URL:** <https://discuss.elastic.co/t/multi-level-transform-with-elasticsearch/300226>\
**Category:** Elasticsearch\
**Created:** [March 21, 2022, 3:54pm UTC](https://discuss.elastic.co/t/multi-level-transform-with-elasticsearch/300226 "2022-03-21T15:54:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bianca6](https://avatars.discourse-cdn.com/v4/letter/b/85e7bf/32.png) [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Post date:** [March 21, 2022, 3:54pm UTC](https://discuss.elastic.co/t/multi-level-transform-with-elasticsearch/300226/1 "2022-03-21T15:54:38Z")

</div>

Hi,

I have different logs just like this:

```auto
timestamp = A, group = B, objectCount= C

timestamp = A, group = B, object = D, value = E
timestamp = A, group = B, object = F, value = G

```

I already use a Transform which group by "group"/"object" and do calculation with "value".

How can I add to this "entity-centric" view the field "objectCount" at the "object" level?

I would like something as:

- group by "group"
- select "objectCount"
- group by "object
- Do some stuff with objetCount and value

Thanks!

---

<div class="post-metadata">

**Author:** ![bianca6](https://avatars.discourse-cdn.com/v4/letter/b/85e7bf/32.png) [@bianca6](https://discuss.elastic.co/u/bianca6)\
**Post date:** [March 25, 2022, 10:30am UTC](https://discuss.elastic.co/t/multi-level-transform-with-elasticsearch/300226/2 "2022-03-25T10:30:05Z")

</div>

Anyone?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 22, 2022, 10:30am UTC](https://discuss.elastic.co/t/multi-level-transform-with-elasticsearch/300226/3 "2022-04-22T10:30:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.