How to use Elasticsearch "search request fields" in Kibana to limit/restrict fields available in panels


(wingfold) #1

This is primarily a Kibana question. I'm wondering if (and how) I can use
the search request
fields feature of elasticsearch (i.e.,
http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-request-fields.html
)
in a kibana templates dashboard
http://www.elasticsearch.org/guide/en/kibana/current/templated-and-scripted-dashboards.html
.

I want to restrict (limit) the fields resulting from queries (or filters)
and passed on
to the Kibana analytic/panels.

In elasticsearch I can easily do this - for example:

curl -XGET 'http://localhost:9200/myindex/_search?pretty' -d '{
  "fields": [ "ltime", "bytes", "ploss" ],
  "query": {
        "term" : { "src.domain.name" : "ukraine" }
   }
}'

does exactly what I want -- but I can't seem to make it work in Kibana by
modifying
template (json) files in Kibana (i.e., json files residing in Kibana's
app/dashboards directory).
There is no error condition from addition of the fields attribute; it just
seems to be ignored.

I am wanting to do this both to limit visibility to some fields and also for
performance (I typically only need a small subset of the 100 or so fields in
the ES documents for any given Kibana dashboard).

Thanks for any pointers.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/36dfeffb-b40e-4ad8-a770-c2dbf25f238e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #2