# Reporting on Multiple Indices in elastic

**URL:** <https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376>\
**Category:** Elasticsearch\
**Created:** [October 8, 2020, 6:37am UTC](https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376 "2020-10-08T06:37:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Khushboo2908](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/khushboo2908/32/76844_2.png) [@Khushboo2908](https://discuss.elastic.co/u/Khushboo2908)\
**Post date:** [October 8, 2020, 6:37am UTC](https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376/1 "2020-10-08T06:37:28Z")

</div>

I have multiple indices in elastic and I need to generate reports using all of them. Description of indices:

Ticket:  
Fields: Ticket\_id, campaign\_id, customer\_id, \<other\_ticket\_attributes\>  
Campaign  
Fields: campaign\_id, campaign\_name  
Customer:  
Fields: customer\_id, customer\_name, customer\_email, etc

**A campaign can have billions of tickets in it, also millions of tickets can be associated with a single customer.**

The report ( say ticket detail report) that needs to be generated should have the following information:  
Ticket\_id, campaign\_id, campaign\_name, customer\_name, customer\_email, etc

While going through the documentation, I realized that this was not feasible either through elastic DQL, Kibana reporting module or ElasticSearch SQL. One of the ways to achieve this was through maintaining a denormalized index containing all the above fields.

In my application’s domain, campaign name and customer details like name etc are editable. This means editing any of these fields will result in the updating of millions of docs. Is this the correct way of implementing such reporting use-cases or should I switch to SQL DBs ( for joins and nested queries)? Any suggestions are welcome.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 5, 2020, 6:37am UTC](https://discuss.elastic.co/t/reporting-on-multiple-indices-in-elastic/251376/2 "2020-11-05T06:37:30Z")

</div>

Closed on November 5, 2020, 6:37am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.