Hoping someone can help me to join data in the same index across multiple events. Here is the event data index event_type job_name item_name queue_time jenkins_statistics queue null xxx/job/3 20 jenkins_statistics queue null xxx/job/3 30 jenkins_statistics queue null xxx/job 0.03 jenkins_statistics job xxx/job/3 null 0.03 jenkins_statistics queue null xxx/job/2 22 jenkins_statistics queue null xxx/job 0.01 jenkins_statistics job xxx/job/2 null 0.01 jenkins_statistics queue null xxx/job/1 25 jenkins_statistics queue null xxx/job/1 15 jenkins_statistics queue null xxx/job 0.19 jenkins_statistics job xxx/job/1 null 0.19   The result I am looking for is index job_name count(queue_time) avg(queue_time) jenkins_statistics xxx/job/3 2 25 jenkins_statistics xxx/job/2 1 22 jenkins_statistics xxx/job/1 2 20   I want to grab each of the events associated with event_type=job and join the job_name field with the item_name field for the events with event_type=queue and get the associated queue_time values for these event_type=queue events and calculate the average per job_name while dropping all other event_type=queue events. I have been trying to get stats to work for this, but have not been able to figure it out. Everything I try includes the queue_time values for the event_type=queue events. I have not been able to effectively join the events across the event_type=job and event_type=queue events  ... View more