Some of my logs/documents contain request information, and one of the fields is message.request_id
, so that field does not exist on every document.
What I want to achieve is to add a Scripted Field of URL type, that'll lead to logs and filter logs by that request-id, basically linking to an immediately filtered log where I can see all the logs related to the particular request. The main reason why I want is to use the field in the data table.
The issue is that I'm new to Scripted Fields and in my case, after I create that custom field I can't see. any logs.
Here is how I'm creating that field:
In the Discovery section, I can see that newly created field, but all other index-related fields are gone and no document is displayed.
What I'm doing wrong?