Index pattern to take into consideration which fields have data #81756
Labels
enhancement
New value added to drive a business result
Feature:Data Views
Data Views code and UI - index patterns before 8.0
impact:low
Addressing this issue will have a low level of impact on the quality/strength of our product.
loe:small
Small Level of Effort
Describe the feature:
It is considered good practice to use the Elastic Common Schema (ECS) for mapping. If you do not know all of the fields which may ever be used, you could just import the entire mapping:
https://github.com/elastic/ecs/blob/master/generated/elasticsearch/7/template.json
This however results in Kibana having LOTS of unused fields listed in any drop-downs where the user should select the field from - the majority of the fields available in the mapping do not have a single document with this field.
Would it be possible in the index pattern interface to have a flag which if enabled (for creating or refreshing an index) would only create field definitions for those fields where there is a mapping defined and at least one document exists with this field in the matching indices. In this way the mapping could be complete for all eventualities, but also the index pattern and resulting available fields in drop-down and auto-complete menues would only show the fields for which some data exists.
The text was updated successfully, but these errors were encountered: