Show nested values in json array\object

(Benyamin Dvoskin) #1


we have some documents that have nested objects, like the example attached.
and for some reason, it doesn't show their values in kibana search tables.
it used to work in Kibana3 with ES 1.x, but since we upgraded to latest versions of ELK, it doesn't work.
any ideas?

Flatten nested fields in a json object
(Court Ewing) #2

I'm not sure I totally understand what you're trying to do, but does this sound like the feature you're looking for?

If so, is the workaround described in this comment useful for you?

(Benyamin Dvoskin) #3

i just hope that my terminology is correct... so that the issue is explained well.
you can see in the screenshot I've attached, that I've built a search in kibana, chosen a few fields to be displayed as columns, but they are not displayed. only when they are nested. like "body.message.messageType" for example.
i can see this field in other visualizations, but not in search columns...

(Court Ewing) #4

Can you post the mappings you use for that index?

(Court Ewing) #5

After digging into this a little more, I don't think this is currently possible in Kibana. This feature request seems to be what you're looking for:

(Benyamin Dvoskin) #6

unfortunately that seems like my issue exactly.
very strange that something like this is not more popular and hasn't been fixed for a year...

(system) #7