How do I reference a field name that contains a dot in watcher logging action

An elastic template index got field names using dots ("property.name") and I am wondering if it is possible reference them using "ctx.payload.hits.hits.0._source" object.

I did some different attempts without success. I know that it works with properties without dots, like
ctx.payload.hits.hits.0._source.@version.

Thank you.

AFAIK dots are not supported in elasticsearch field names.

You may try using this

1 Like

I don´t get it.
I thought using Elastic Common Schema no problems couldn´t be arise.
Maybe I didn´t understood the ECS meaning and its benefits.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

A workaround to access fields with dots in their name is to wrap them in a context, such as:

{{#ctx.payload.hits.hits.0._source}}{{property.name}}{{/ctx.payload.hits.hits.0._source}}