my fileds name in index are :category_code, userdata1,userdata2 ,userdata3 .
for events by category_code= 1 then userdata1 means name ,userdata2 means family ,userdata3 means phone
for events by category_code= 2 then userdata1 means ip ,userdata2 means domain ,userdata3 means mac_address
and many other category_codes
i have to saved discovery for category_cods , for clarity i need save some alias name for those fields.but there is nothing to do that.
i dont like do this in logstash or change data structure.
The real issue here is that some places in Kibana allow you to specify a display name for a data point, and others do not. Saved searches stand out here as a place where you cannot. It would definitely be a useful feature for creating more user-friendly dashboards.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.