cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Issue with Elasticsearch - how to index values under the field "userActions" ?

mackermann2
Frequent Guest

Hello,

We are using the feature "User session export" in Dynatrace to send all the sessions in an Elasticsearch database. I have applied the sample mapping provided by Dynatrace to create the index
but I have a problem : it is not possible to index the values (in Kibana) under the field "userActions"
because the type of this field is an array. The error/warning message is the following in Kibana : "Objects in arrays are not well supported" :

Is there a solution (an another mapping file for Elasticsearch?) which permit to index the values contained in this field ? I'm not a guru with Elasticsearch, if experts are in the place... 😉

Thanks in advance,
Regards,
Matthieu.

 

3 REPLIES 3

mackermann2
Frequent Guest

I forgot to mention that we use the latest version of Kibana and Elasticsearch (6.4.1)


alonso_decosio
Inactive

Hi Matthieu,

This is a problem related to the way Kibana handles nested queries. To solve this issue, you may want to take a look at this plugin https://github.com/ppadovani/KibanaNestedSupportPlugin.

Regards

Alonso


mackermann2
Frequent Guest

Hi Alonso, Thank you for your answer.

I thought about this solution but the problem is that a plugin must evolve with the Kibana version.
In addition, version 6.4.1 of Kibana is not yet supported (last release for v6.3.2): https://ppadovani.github.io/knql_plugin/installati...

An another plugin exists but the latest compatible release is also for v6.3.2 : https://github.com/istresearch/kibana-object-format

Is the use of a plugin the only solution to this problem ?