I have 2 fields of string type in filebeat index: _index = kibana_sample_data_flights (This field is marked aggregatable by default) message : 2018-12-21 02:31:31,792;INFO ;XSYD.2.5.0.1a5e8-uye1-9d87-8744-5343db306cd8;1;0;;GETCONFPRO;0; I want to split by ; and get the timestamp (This f…

Painless script query giving error for "message" field and working fine for other fields in filebeats

system (system) Closed January 23, 2019, 9:36am 5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Unable to make a field aggregatable in kibana Elasticsearch	27	10402	January 25, 2019
Unable to parse "message" field using filbeats Kibana	3	353	January 23, 2019
Discover: Field data loading is forbidden on message Kibana	2	1590	July 6, 2017
Create a new filed from a string field in painless script/ Substing in painless Beats filebeat	3	747	January 8, 2019
Kibana - Error including scripted fields in aggregation Elasticsearch	4	1439	July 6, 2017