Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.16
Describe the issue: "Failed to parse query due to offending symbol [source] at: 'source = “alias”
Configuration:
Relevant Logs or Screenshots:
Hey @arun.john
Can you give us some more details, perhaps I can reproduce it? where are you seeing that issue?
I have multiple indices. So I have combined them together as part of an alias, which was done is Dev Tools.
POST _aliases
{
"actions": [
{
"add": {
"index": "wms-*",
"alias": "wms-star-indices"
}
}
]
}
Now, I am trying to use this alias within an Observability Application to create visualizations within the application.
@arun.john Could you share the output of the following:
GET _cat/aliases?v
Hi @arun.john,
I have run some tests on the latest version 2.19.1, and it seems like the alias is not a supported log source with Observability Applications.
However, you could use a wildcard:
source = wms-*
i.e:
Best,
mj