Search within 2 index where 'not in'

Elastic Stack Kibana
1

I have 2 index in elasticsearch, trxtxn ( transaction ) and trxrsp ( response )

Both index have same unique id call header.serialnum. Is it possible to display document only for trxtxn which not in trxrsp? So, I can know which transaction don't have response yet.

TQ

2

If it's a simple ES search, you can just search on that index : GET trxtxn/_search
If you have a index-pattern in kibana similar to trx* than you use the filter bar to filter the index field _index

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.