How do I reference a field name that contains a dot in watcher logging action

Elastic Stack Elasticsearch
#1

An elastic template index got field names using dots ("property.name") and I am wondering if it is possible reference them using "ctx.payload.hits.hits.0._source" object.

I did some different attempts without success. I know that it works with properties without dots, like
ctx.payload.hits.hits.0._source.@version.

Thank you.

#2

AFAIK dots are not supported in elasticsearch field names.

You may try using this

1 Like
#3

I donĀ“t get it.
I thought using Elastic Common Schema no problems couldnĀ“t be arise.
Maybe I didnĀ“t understood the ECS meaning and its benefits.

#4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

#5

A workaround to access fields with dots in their name is to wrap them in a context, such as:

{{#ctx.payload.hits.hits.0._source}}{{property.name}}{{/ctx.payload.hits.hits.0._source}}