How to group or merge multiple fields to one field name

Elastic Stack Kibana
1

hi,
I have a problem, I have several fields with similar names, for example: rest.direction, mmu.direction, xml.direction, and I need them to be displayed in Kiban only under one field, for example "direction". Is it possible to do it?? what I read, the alias is only for one field.

2

Welcome!

Have a look at field aliases.

3

Thanks for the answer, but I don't know if alias is the right solution. I guess I can't set it up, I called it like this and the source for the alias always changes, a new one is not added.

PUT index_name/_mapping
{
  "properties": {
    "direction": {
      "type": "alias",
      "path": "rest.direction" 
    }
  }
}
 
PUT index_name/_mapping
{
  "properties": {
    "direction": {
      "type": "alias",
      "path": "xml.direction" 
    }
  }
}
4

Not sure I understand what you're saying. A complete example would help.

But anyway, the other option could be runtime fields.

5

I need make

image
image1239×632 41.8 KB

6

So field alias should work.
Runtime fields as well. But I prefer the former in that case.

7

I don know writt this alliases for one name "direction" for more source fields. my source path is always overwritten Plese send me example.

8 
DELETE /test1,test2
PUT /test1
{
  "mappings": {
    "properties": {
      "xml.direction": {
        "type": "text"
      },
      "direction": {
        "type": "alias",
        "path": "xml.direction" 
      }
    }
  }
}
PUT /test2
{
  "mappings": {
    "properties": {
      "rest.direction": {
        "type": "text"
      },
      "direction": {
        "type": "alias",
        "path": "rest.direction" 
      }
    }
  }
}

POST /test1/_doc
{
  "xml.direction": "foo"
}
POST /test2/_doc
{
  "rest.direction": "bar"
}

GET /test1,test2/_search
{
  "query": {
    "match": {
      "direction": "foo bar"
    }
  }
}

Then in Kibana:

image
image723×564 28.1 KB

9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.