We cannot see the variables we want in the available field section.
I can see the logs I want in the Discover section. But I cannot see all of these logs while designing graphics in the dashboard. E.g;
The log example displayed in the Discover Section;
message: {"name": "ece", "surname": "nice", "age": "21"}, @verison: 1, host: linux
For example, in this example, I can view the verison and host part in the graph, but I cannot view the message part. I want to view both the message part and the "name" part in the message part on the chart. At least I want to draw "name" from the message part.
Thank you very much if you help.
Have a nice day
Stay safe
What are the mappings used for this index? I'm wondering if message
is a text/keyword field, in which case you won't be able to extract the fields. If you are ingesting these logs with logstash, you could arrange to have logstash parse that JSON. See: JSON filter plugin | Logstash Reference [7.11] | Elastic
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.