TSVB - match fields from two Indexes V7.3

[martb]

Hi,

I'm new to the TSVB in Kibana. Im displaying data from one index and trying to tag events from another index where the field contents matches i.e hostname.
All works accept the tagging events on match. Please advise what the 'Query string' under Annotations would be to match two different index fields?

Many Thanks

[cheiligers]

Hi @martb, I don't know what your mapping is and can't give you the query string to issue.
However, if you take a look at the TSVB visualization for the flights dataset, there's a TSVB that uses three fields for the annotations:

Here's a handy video for reference too: https://www.elastic.co/blog/time-series-annotations-and-anomalies-with-kibana