Hi,
what would be the right way to join between two data sources using
Kibana 4 interface?
Assume 2 data sources:
1. source=jobs, fields = {jobid, user, host, exitstatus,
starttime,finishtime}
Sample record:
type = jobs; jobid = 1234; user = john; host = myhost; exitstatus =
-3002; starttime = 01/01/2015 01:01; finishtime = 01/01/2015 01:15
2. source=license, fields = {host, user, time, feature, result}
Sample records:
type = license; user = john; host = myhost; time = 01/01/2015 01:05;
feature = AAA; result = DENIED
type = license; user = john; host = myhost; time = 01/01/2015 01:07;
feature = BBB; result = APPROVED
I’d like to create a dashboard in Kibana 4 which would show a joint table
combining both sources.
Using pseudo-SQL code, it should do something like:
select
jobs.jobid,jobs.user,jobs.host,license.feature,license.result,count(license.time)
from jobs
LEFT JOIN license
WHERE jobs.exitstatus=-3002 AND license.user=jobs.user AND
license.host=jobs.host AND license.time>=jobs.starttime AND
license.time<=jobs.finishtime
GROUP BY jobs.jobid,jobs.user,jobs.host
Thanks in advance,
Gregory
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/daf3dbf4-7b76-477e-8b10-5ca54cb53bf0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
