I have the following problem. In the JSON Messages for ES I got multiple data in a field and I want to match this data with an regex. So I´ve tested it in the Kibana Developer Console (Webinterface) and I`ve tried to understand what I am doing wrong.
I have the following painless-script for a scripted field:
The problem is that Kibana returns just the value for NULL, but ALL messages contain this data.
If I understand correctly this would be mean that the field myField.keyword should be NULL but this is not the case.
I hope somebody have a solution for my problem.
I am looking forward to hear from you!
Best regards,
Robert
Thanks for your answer.
I´ve tried your version with doc['myField'].value. After I setting the property "fielddata" to true, I can search directly in the value of doc['myField']. But it seems that my regex-expression does not find anything, but it works for me in seperate tool to build regex-expressions.
Do you have an idea why I don´t get anything from the regex-expression in kibana?
This is the field-value! It´s not a seperate Message.
I want to get the Username including SERVER\\Username (the backslash can be one or two inside the name). I hope this "Test-Data" can help you to find out whats the problem.
I just let myself spend the field value, but I get back the value "0" even though my message on the Discover page is in this field. Does anyone have an idea why that is?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.