Get "Objects in arrays are not well supported" with new schema in Kibana

I have a multi log type in my system. I want to aggregate this Log and index it into Elasticsearch. my final schema is below.

{
    "id": 1,
    "name": 2,
    "history": [
        {
            "login": {
                "time": "123",
                "text": "aaa"
            },
            "logout": {
                "time": "124",
                "text": "bbb"
            }
        },
        {
            "login": {
                "time": "125",
                "text": "ccc"
            },
            "logout": {
                "time": "126",
                "text": "ddd"
            }
        }
    ]
}

When I index this schema to Elsaticsearch search I get below warning in Kibana(Discover tab).

Objects in arrays are not well supported

but I can filter on all fields!

  • why this warning show?
  • Elasticsearch is not supported object in array?
  • What do I do?
  • is another way to index this type of schema?

Hello Sohyel,

This is an old issue in Kibana. There are several issues capturing it on Github but you might want to look at this more recent one which includes some relevant links and suggestions for workarounds. Also see the linked PR (which is in-progress) at the bottom!

Regards,
Aaron

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.