Hi,
I want to make string field as aggregatable.
I have visualization json as follows:
{
"_id": "Top-Switches-by-Endpoint-Count",
"_type": "visualization",
"_source": {
"description": "",
"uiStateJSON": "{}",
"title": "Top Switches by Endpoint Count",
"version": 1,
"kibanaSavedObjectMeta": {
"searchSourceJSON": "{ "index": "epl_cache_today", "query": { "query_string": { "query": "*", "analyze_wildcard": true } }, "filter": }"
},
"visState": "{ "title": "Current View: Top ToRs for Fabric", "type": "pie", "params": { "shareYAxis": true, "addTooltip": true, "addLegend": true, "isDonut": true }, "aggs": [ { "id": "1", "type": "count", "schema": "metric", "params": {} }, { "id": "2", "type": "terms", "schema": "segment", "params": { "field": "Switch_Name", "size": 5, "order": "desc", "orderBy": "1" } } ], "listeners": {}}"
}
}
But when I import this json as visualization in kibana 5.5.3 I see an error:
Saved "field" parameter is now invalid. Please select a new field.
Visualize: "field" is a required parameter
I have mapping as following example
{
"name": "Switch_Name",
"type": "text",
"fields": {
"keyword": {
"type": "keyword"
}
},
"count": 0,
"scripted": false,
"indexed": true,
"analyzed": false,
"doc_values": true
}
and visualization schema as follows:
"visualization" : {
"properties" : {
"description" : {
"type" : "text"
},
"kibanaSavedObjectMeta" : {
"properties" : {
"searchSourceJSON" : {
"type" : "text"
}
}
},
"savedSearchId" : {
"type" : "text"
},
"title" : {
"type" : "text"
},
"uiStateJSON" : {
"type" : "text"
},
"version" : {
"type" : "integer"
},
"visState" : {
"type" : "text"
}
}
}
When I select split slices, in aggregation when I select terms I do not see any string fields in it
Can anyone please help me with this?
Thanks,
Chirag