Hi everyone,
The sample log I sent to Elastic is below.
Although the value of a ‘Statement’ field is null, when I assign ‘key’ as a row in the dashboard, it shows the value of another Statement field instead of showing null. How can I solve this?
Thanks in advance for help.
{
"agent": {
"name": "st-esagent01",
"id": "49d47611-0a1f-4951-1afe-25ea86dadf4a",
"ephemeral_id": "1611ef88-041b-4aa5-84f0-1093a38494e3",
"type": "filebeat",
"version": "8.17.0"
},
"request_type": 0,
"user_name": "mobile",
"elastic_agent": {
"id": "49d47611-0a1f-4951-1afe-25ea86dadf4a",
"version": "8.17.0",
"snapshot": false
},
"language_id": 1,
"execution_tree_object": [
{
"Response": {
"EndTime": "0001-01-01T00:00:00",
"Results": [],
"IsInitialized": true,
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": true,
"Key": "777",
"GottenFromCache": false,
"BusinessKey": 0
},
"EndTime": "2025-01-08T16:49:24.4665785+03:00",
"Results": [],
"Statement": null,
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": true,
"Key": "Orchestration.Authentication.Test"
},
{
"Response": {
"EndTime": "0001-01-01T00:00:00",
"Results": [],
"IsInitialized": true,
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": true,
"Key": "888",
"GottenFromCache": false,
"BusinessKey": 0
},
"EndTime": "2025-01-08T16:49:24.4665785+03:00",
"Results": [],
"Statement": "SqlQuery=Test @UserName = 'test'",
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": true,
"Key": "Data.ExecuteTest"
},
{
"Response": {
"EndTime": "0001-01-01T00:00:00",
"Results": [],
"IsInitialized": false,
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": false,
"Key": "999",
"GottenFromCache": false,
"BusinessKey": 0
},
"EndTime": "2025-01-08T16:49:24.4665785+03:00",
"Results": [],
"Statement": "UserIPAddress @UserName = 'test'",
"StartTime": "2025-01-08T16:49:24.4665785+03:00",
"Success": true,
"Key": "Data.ExecuteTest"
}
]
}