I have 2 index in elasticsearch, trxtxn ( transaction ) and trxrsp ( response )
Both index have same unique id call header.serialnum. Is it possible to display document only for trxtxn which not in trxrsp? So, I can know which transaction don't have response yet.
If it's a simple ES search, you can just search on that index :
If you have a index-pattern in kibana similar to
trx* than you use the filter bar to filter the index field
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.