My visualize query:
{
$schema: https://vega.github.io/schema/vega-lite/v2.json
title: Event counts from all indexes
data: {
url: {
index: index-*
body: {
query: {
bool: {
must: [
{
range: {
@timestamp: {gt: "now-15m"}
}
}
{
match: {logStatus: "success"}
}
]
}
}
size: 20
}
}
format: {property: "hits.hits"}
}
mark: circle
encoding: {
x: {
field: _source.@timestamp
type: temporal
axis: {title: "time"}
}
y: {
field: _source.logEvent
type: nominal
axis: {title: "event"}
}
}
}
I checked browser network and there is _search
request with correct data in response. I just see the chart showing title and legends, but there is no data. What is wrong in the above visualize query object?