Hi,
I'm trying to understand the inner working of index alias.
I have to indexes that are coming from different sources.
The only common denominator between two index is the "vm" attribute, which denotes virtual machine name.
Even timestamps between two indexes is diffrent, one is polled one time each day, at midnight (00:00:00) and the other index, data is polled every 30 minutes.
Actually, when I create an alias and in "vizualise" section, I can see all attribute from two indexes but the value are empty for all time. However, if I "visuzlise" one of two indexes, I can see all data.
When I create an index alias, does the elasticsearch should be able to "aggregate" two different indexes according to "vm" attribute that is same for both or this isn't enough?
Thank you!