I have created a field as multi field in elastic mapping, originalfield as text and originalfield.keyword as keyword for aggregation but while showing the data in discover table only I get the value in originalfield and not in originalfield.keyword . I need to get the .keyword field as i want to perform sort and filter which is not possible on original field
Since the keyword fields aren't part of the original source document they don't show up in the left sidebar of discover automatically. You can make them appear by unchecking the "Hide missing fields" option. You'll probably want to put the text and keyword versions side by side in the table, because the keyword column will not show values (again, because there are no values for this field in the original source document) but you will be able to sort on it.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.