String concatenation

hello all, I have three string fields and am trying to concatenate. I tried scripting field but it was throwing error.

doc['message.keyword'].value +doc[process.keyword'].value

also, tried to create a bucket aggregation scripted field, I didn't get the syntax right

could you please guide me, am really new to Kibana and couldn't find any tutorial which could have helped.


doc['message'].value +doc[process'].value should work. If not, try using raw instead of keyword.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.