I am working on logs collecting using Elastic Stack and I wanted to present logs in a data table. They should be grouped by "Call ID", which I have achieved using Buckets with Terms aggregation.
As you can see, each log consists of date, level , callId and message.
Now the problem is, that the data table displays ONLY ONE log. I know that I can add more of them by 'concatenate' operation, but that will still place them in one line like this:
message1, message2, message3,
I need to have each log in a separate row. Is it possible to do?
Note. I know that I can use Discover to filter my logs by Call Id, but this is not the case here. I need to have logs GROUPED by call Id.