Как правильно работать с полями flattened в Kibana?

Sergei_Frolov · August 2, 2021, 2:55pm

Приветствую! Подскажите, как правильно работать с полями flattened в Kibana? Есть ли какая-то возможность подсветки при поиске - как сейчас делается для других полей? Может еще есть какие-то практики, как удобно с ними работать? Сейчас пока я не нашел ничего кроме вычисляемых полей в Kibana для работы с ними.

Igor_Motov · August 2, 2021, 3:38pm

github.com/elastic/kibana

Support flattened field type from Elasticsearch

opened 06:28PM - 16 Nov 18 UTC

Bargs

EnableJiraSync Feature:New Field Type Team:AppServices Team:KibanaApp enhancement impact:low loe:days

A new object field type is [coming to ES](https://github.com/elastic/elasticsear…ch/issues/33003). I played around with the feature branch a bit today and collected some thoughts and findings. From what I've seen so far, there are some small updates to Kibana we'll definitely want to make and some things we should discuss. * Need to add `JSON` type to kibana (or whatever name the ES lands on for this field type). Currently it shows up in the index pattern as `unknown`. * Autocomplete on values doesn't work because the field is not aggregatable * Autocomplete on field names doesn’t work, because we don't know what sub-fields the object has * In KQL we implement wildcard field names ourselves based on the fields in the index pattern, so something like head*:application/json actually works but headers.con*:application/json does not because we don’t know about those fields. This could be pretty confusing to users * Filters can’t be created from the doc table (similar to our treatment of arrays of objects today) * Filters can't be created from the "Add Filter" UI in the filter bar (this is worse than no autocomplete in the query bar because we don’t allow free text input for the field name. Currently the field name must be in the index pattern) * Highlighting would be nice, however we don’t currently highlight values inside arrays of objects, so a lack highlighting in a JSON document won’t be totally surprising to current users. I only spent about an hour with it so there may be more things I'm missing, would definitely be good to get more eyes on it. Feature branch here if anyone else wants to check it out: https://github.com/elastic/elasticsearch/tree/object-fields

system · August 30, 2021, 3:39pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Поля в Kibana Вопросы на русском языке	1	399	February 22, 2021
Ссылка в таблице в Kibana Вопросы на русском языке	3	896	February 22, 2018
Trying to connect Kibana to Elasticsearch Kibana	5	19	October 24, 2024
Elasticsearch trouble Вопросы на русском языке	3	449	September 23, 2020
ElasticSearch & Kibana для анализа кликов Вопросы на русском языке	7	1649	November 10, 2017

Как правильно работать с полями flattened в Kibana?

Related topics