Declaring runtime fields when creating transforms

I would like to add runtime fields against the index that is created when creating a transformation.
I saw that the kibana transform gui offers a text box to work with runtime fields but not sure about how it works.


Should i create a index template for this purpose?

Runtime fields can be added to either the Data View in kibana or to the index in Elasticsearch via the API after the transform index has been created.

In Kibana the field can be added in the Data Views page, in the Stack Management section
This will only exist in kibana and can be used for all dashboards, visualisations etc.

Otherwise using the API you can add the runtime field to the index.

Amazing !!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.