I'm new to these forums so please let me know if I've posted this in the wrong place.
I have an index that contains a key-value tags consisting of an array of values, which are dictionaries. The dictionaries always have 3 keys, key, type, and `value.
However what I'd really like is to flatten the nested dictionaries so they were top-level key-values in the document using the corresponding key and value, like this:
"Nest" has a meaning in ES.
By default, all fields are not nested. It just adds a name space to your key.
So in your case, every object under "tags" is searched equally.
In your example, you just need to use "tags.http.status_code".
If you really want top level, you have to store each object as individual document.
Basically removing the layer "tags", which eliminates the arraylist (tags).
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.