Siren Platform User Guide

Numeric or string attributes

Joining numeric attributes is more efficient than joining string attributes. If you are planning to join attributes of type string, you should generate a murmur hash of the string value at indexing time into a new attribute, and use this new attribute for the join. Such index-time data transformation can be easily done by using Logstash’s fingerprint plugin (https://www.elastic.co/guide/en/logstash/current/plugins-filters-fingerprint.html).