Splitting tag values

Elastic Stack Kibana
1

Hello,
We try to create json objects at our end from the log files and send them to ingest_pipelines and then visualize via Kibana. Most of the parts are working fine except the tags whcih is a multi-valued comma separated string.

The json document that we send to ingest_pipeline is as follows:

image
image.png811×264 7.99 KB

I have tried multiple ways to recreate the json document as you can see in the kibana - discover, however I am not able to see the split of the tags into individual entries.
image

can someone help me out as to how I should be passing my json to the elasticsearch so that the individual tag entries are split?

thanks
Tanmoy

2

No need to stringify the data, you should be able to ingest directly using the array.

i.e. "tags": ["EMR", "hadoop-application"] etc.

3

thanks lukas. your tip helped. my mistake was to pass the tags as a string and not as an array...on changing the code it works fine

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.