This is primarily a Kibana question. I'm wondering if (and how) I can use
the search request
fields feature of elasticsearch (i.e.,
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-request-fields.html
)
in a kibana templates dashboard
http://www.elasticsearch.org/guide/en/kibana/current/templated-and-scripted-dashboards.html
.
I want to restrict (limit) the fields resulting from queries (or filters)
and passed on
to the Kibana analytic/panels.
In elasticsearch I can easily do this - for example:
curl -XGET 'http://localhost:9200/myindex/_search?pretty' -d '{
"fields": [ "ltime", "bytes", "ploss" ],
"query": {
"term" : { "src.domain.name" : "ukraine" }
}
}'
does exactly what I want -- but I can't seem to make it work in Kibana by
modifying
template (json) files in Kibana (i.e., json files residing in Kibana's
app/dashboards directory).
There is no error condition from addition of the fields attribute; it just
seems to be ignored.
I am wanting to do this both to limit visibility to some fields and also for
performance (I typically only need a small subset of the 100 or so fields in
the ES documents for any given Kibana dashboard).
Thanks for any pointers.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/36dfeffb-b40e-4ad8-a770-c2dbf25f238e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.