I am creating Kibana Dashboard based on log data.
I want to create Data Table for the most common warnings, with some stacktrace info (if exists).
Each entry can contain multiple stacktrace messages, but the first one is most valuable - the one starting with the "Caused by".
This is how my bucket configuration looks now:
And produced result:
I tried to use the Advance -> Include filter with the "Caused.*|Missing", but this filters out all rows, that do not contain any stacktrace.
How to create a filter, that will show only rows, where stacktrace starts with "Caused" or the stacktrace value is missing?