I am using ElasticSearch and Kibana 7x version, I am trying to concatenate two fields values.
Before I write actual concatenation painless script, I tried accessing field values from scripted field.
when I run the query doc['destination.domain'].value it is not giving any values instead it is showing []
But the actual values of destination.domain field is something like test.mydomain.com.
Somehow it is showing the null value [] in preview results. But when I create the field and access the value from discover section, the value is coming properly. The script I wrote like
If it shows [ ] in the preview results is due to there being no documents in the last 10 that match your script, for example those with destination.domain being empty.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.