Hi All,
I'm trying to get a transform working, my first one admittedly, but regardless of whether I do API or via browser setup it errors. An example transform preview:
POST _transform/_preview
{
"source": {
"index": "logs-*"
},
"pivot": {
"group_by": {
"customer": {
"terms": {
"field": "customer"
}
}
},
"aggregations": {
"module": {
"value_count": {
"field": "event.module"
}
}
}
}
}
The error:
{
"error" : {
"root_cause" : [
{
"type" : "status_exception",
"reason" : "Please provide a transform [id] or the config object"
}
],
"type" : "status_exception",
"reason" : "Please provide a transform [id] or the config object"
},
"status" : 400
}
No matter what I try and do with a transform it comes out with the same error.. I believe i've got the coding right.. but i'm stuck. Any help greatly appreciated.
J