Any one can help me please.
I have two files inputs from logstash:
The first contains some fields like : ipadress ,name, age
and the second : location, sexe, ipadress
they have ipadress field in common with same value.
My goal is when i search for name x , i would like to show all fields as a result like age, sexe ,location using ipadress in common like join in sql.
I have diffuclt to index them, and if i index these two inputs in two index can i make a link between two indexes ? or is it possible to index them in same index ?
i m receiving data from two Streaming input( two applications) .I m using logstash to parse data then send them to elasticsearch and evry input has many fields , ipadress in common field with the other input.
Hello,
After searching, i found that in this case it is possible to use parent-child feature.
Is there any support for parent-child indexing in logstash please ?
How can i index parents and child using logstash ?
I'd not use that feature unless there's no other choice. So I'd recommend that you check that it's absolutely necessary for your use case to use joins at search time.
But if you want to do it, I'd recommend asking that question in #logstash channel.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.