Is there a way to do this? Maybe access JSON somehow?
Rationale: On nearly every vis I have to edit the search params to include '.keyword'. The charts that are installed by packetbeat, auditbeat, etc don't work (for me) until I make this edit.
Is there a way to do this? Maybe access JSON somehow?
Rationale: On nearly every vis I have to edit the search params to include '.keyword'. The charts that are installed by packetbeat, auditbeat, etc don't work (for me) until I make this edit.
You can use the saved objects API to export, manipulate and re-import visualizations with a script on your local machine.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.