First of all, thanks for some really awesome products. We are using EK to centralise our logs from our integration plattform and it has done wonders as to what insights we can now provide to business.
We sometimes log large payloads as part of our log messages. For instance:
"attachment.content": "Big XML"
This works fine and we can saw the raw content when do a search in the discover. We wanted now to transform the field into a clickable link so that when the user clicks the link, a new tab opens and the raw content is disabled. The raw content by itself is not a url or an image, it is just some string data.
I am on Kibana 6.1 and have played with the string formatter for using label and url formatter but can't seem to get this to work. Is this possible or does the data itself need to be an image or some url?
Just to be clear I don't have a
http://company.net url to refer to, I simply want Kibana to force a new tab showing the raw value of the field.