Query documents present in both indexes

(Nachiket) #1


I have two indices:

  1. info-source
  2. info-destination

Both the indices have a few similar field. One such field is the ip field.

I wish to write a query that will give me a list of ip present in both indices. Can this be accomplished in elasticsearch? Currently I am doing this in Python, but this adds an overhead which I wish to avoid. Please help.


(Nachiket) #2


Can anyone please confirm if JOINS are possible?


(David Pilato) #3

It's not. Unless you use parent / child feature

BTW read this and specifically the "Also be patient" part.

It's fine to answer on your own thread after 2 or 3 days (not including weekends) if you don't have an answer.

(system) closed #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.