CREATE TEMPORARY TABLE trips USING org.elasticsearch.spark.sql OPTIONS (
nodes "....", port "80",
resource "events-2018.09.03/events",
read.field.include "client.browser.os"
)
select client.browser.os from trips limit 10
This is working fine, but, the generated elasticsearch query is:
{
"slice": {
"id": 20,
"max": 21
},
"query": {
"match_all": {}
},
"_source": ["client"]
}
Why _source is not : client.browser.os ?