Transforms

edit

This content applies to: Elasticsearch Observability Security

Transforms enable you to convert existing Elasticsearch indices into summarized indices, which provide opportunities for new insights and analytics.

For example, you can use transforms to pivot your data into entity-centric indices that summarize the behavior of users or sessions or other entities in your data. Or you can use transforms to find the latest document among all the documents that have a certain unique key.

For more information, check out:

Create and manage transforms
edit

In Project settings → Management → Transforms, you can create, edit, stop, start, reset, and delete transforms:

Transforms app

When you create a transform, you must choose between two types: pivot and latest. You must also decide whether you want the transform to run once or continuously. For more information, go to Transforms overview.