Kibana不会在嵌套字段中搜索 [英] Kibana does not search on nested field

问题描述

使用Elasticsearch/Kibana并尝试在嵌套对象中的字段上进行搜索.但是，它似乎不起作用.这是我在模板中使用的映射:

working with Elasticsearch/Kibana and trying to search on field in a nested object. However it does not seem to work. Here's mapping that I use in a template:

{
  "order": 0,
  "template": "ss7_signaling*",
  "settings": {
    "index": {
      "mapping.total_fields.limit": 3000,
      "number_of_shards": "5",
      "refresh_interval": "30s"
  },
  "mappings": {
    "_default_": {
      "dynamic_templates": [
        {
          "string_fields": {
            "mapping": {
              "fielddata": {
                "format": "disabled"
              },
              "index": "no",
              "type": "string"
            },
            "match_mapping_type": "string",
            "match": "*"
          }
        }
      ],
      "properties": {
        "message": {
          "index": "not_analyzed",
          "type": "string"
        },
        "Protocol": {
          "index": "not_analyzed",
          "type": "string"
        },
        "IMSI": {
          "index": "not_analyzed",
          "type": "string"
        },
        "nested": {
            "type": "nested",
            "properties": {
                "name": {
                    "type": "string",
                    "index": "not_analyzed"
                }
            }
        },
        "Timestamp": {
          "format": "strict_date_optional_time||epoch_millis",
          "type": "date"
        },
        "@timestamp": {
          "type": "date"
        },
        "@version": {
          "index": "not_analyzed",
          "type": "string"
        }
      },
      "_all": {
        "norms": false,
        "enabled": false
      }
    }
  },
  "aliases": {
    "signaling": {}
  }
}

当我在单个字段上搜索kibana时-一切正常.尽管如此，我仍然无法搜索"nested.name"之类的嵌套字段.

When I do search kibana on single fields - everything works fine. Still though i cannot search on nested fields like 'nested.name'.

我在kibana中查询的示例:nested.name:hi

Example of my query in kibana: nested.name:hi

谢谢.

推荐答案

Kibana在下面使用query_string查询，而后者不支持对嵌套字段进行查询.

Kibana uses the query_string query underneath, and the latter does not support querying on nested fields.

它仍在工作，但与此同时，您需要以不同的方式进行操作.

It's still being worked on but in the meantime you need to proceed differently.

这篇关于Kibana不会在嵌套字段中搜索的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！