Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
2.17.1
Describe the issue:
Hi
I have a time series index, where I enrich a document with computed time difference between two messages.
I want to display both messages and the enriched time difference in dashboard table with filtering on message content (e.g. speed)
and enriched data. In Query I could use a field join and it works (message 1 is displayed as inner hits)
How could I display both messages and enriched field in dashboard ? ( I want to display it in table with columns from 1st , 2nd message and enriched field)
Message1:
{
_id: 123,
time: "2025-06-03T08:12:48.0104Z",
vehicle_id: 4713,
speed: 50
}
Message2:
{
_id: 456,
time: "2025-06-03T08:12:58.0104Z",
vehicle_id: 4713,
speed: 43,
difference : {
previous_message_id: 123
timediff_sec: 10
}
}