AWS opensearch service, v1.2.
In my data, for example,
[
{
“@timestamp”: “Apr 5, 2022 @ 11:00:00”,
“level” : “INFO”,
“name”: “Login”,
“type”: 1,
“service” : “my-service”,
“jsonpayload”: {
“key1” : “data1”,
“key2” : “data2”
}
},
{
“@timestamp”: “Apr 5, 2022 @ 11:01:00”,
“level” : “INFO”,
“name”: “Logout”,
“type”: 1,
“service” : “my-service”,
“jsonpayload”: {
“key5” : “data5”, // ( key is different with above )
“key6” : “data6”,
}
}
]
And I want to visualize using data table select only “jsonpayload”.
I tried to make saved query in discover.
Add filter → Edit as Query DSL like this
{
“_source”: {
“includes”: [“jsonpayload”],
“excludes”:
},
“query”: {
“match” : {
“type”: 1
}
}
}
but it shows all fields of my data.
it seems to be not working “includes” in DSL.
Are there other ways to show only specific field in data table for visualization?
I want to show just “jsonpayload” field in data table.
Somebody can help me?