Agreed, but if I have that field in elasticsearch kibana should see it as aggregatable I would expect.
It creates such a field in my dynamic mapping and those are perfectly aggregatable.
It could be that it is not a ES problem but a kibana problem, who knows....
if i want to aggregate by a .keyword field in main _source tree, all is working fine.
But if I have .keyword field in deeper sructure there I am not able to aggregate thta. Still getting empty result:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.