Elasticsearch Watcher Capabilities

Elastic Stack Elasticsearch
1

Hello,

We plan to implement such a watcher that will regex a field in the documents that are found and pass it to the clients. What I mean is;

Let's assume there are 2 documents like below;

{
  "_type": "_doc",
  "_id": "VbnxRYcBbONNOA7tHnlq",
  "_version": 1,
  "_score": 1,
  "_ignored": [
    "Message.keyword"
  ],
  "_source": {
    "Message": "Result is: true, data is: qqq",
    "LogType": "Info",
    "LogDate": "2023-04-03T07:07:22.5906183Z"
  },
  "fields": {
    "Message": [
      "Result is: true, data is: qqq"
    ],
    "LogType": [
      "Info"
    ],
    "LogDate": [
      "2023-04-03T07:07:22.590Z"
    ]
  }
}

{
  "_type": "_doc",
  "_id": "VbnxRYcBbONNOA7tHnlq",
  "_version": 1,
  "_score": 1,
  "_ignored": [
    "Message.keyword"
  ],
  "_source": {
    "Message": "Result is: true, data is: qqq",
    "LogType": "Info",
    "LogDate": "2023-04-03T07:07:22.5906183Z"
  },
  "fields": {
    "Message": [
      "Result is: false, data is: qqq"
    ],
    "LogType": [
      "Info"
    ],
    "LogDate": [
      "2023-04-03T07:07:22.590Z"
    ]
  }
}

We want to use the result/data fields in the document. We'll go for separate fields as a last resort.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.