Split single field using dynamic template

Hi there!

I'm having a problem with some data I'm importing from dynatrace into elasticsearch.

To make some dashboards I'd like to have certain data in separate fields, whereas dynatrace sends them all compacted in a single field.
To make an example I have a field 'general' structured as follows:
"general: number value1 value2 value3"
What I'd like to do is to apply a template so as to have those values splitted into several fields like:

field1: value1
field2: value2
field3: value3

Basically, it is the opposite of what is shown in the documentation (https://www.elastic.co/guide/en/elasticsearch/reference/current/dynamic-templates.html#path-match-unmatch) where it creates a field 'full-name' from several separated fields.

Is there a way to do that?

Thank you in advance!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.