elasticsearch icon indicating copy to clipboard operation
elasticsearch copied to clipboard

[Enrich Policies] Allow use of * to enrich all fields from the selected indices

Open sabarasaba opened this issue 2 years ago • 2 comments

We have recently started working on adding enrich policies support in kibana and one thing we noticed is that when creating a policy if a use selects 2 indices and then wants to enrich all the fields from those indices we will have to send a huge list of fields in the payload to the api. We were wondering if it would be possible to instead support a wildcard like * to force the policy to enrich all the fields from all the indices? Something like:

PUT /_enrich/policy/my-policy
{
  "match": {
    "indices": ["users", "customers"],
    "match_field": "email",
    "enrich_fields": "*"
  }
}

Meaning that it will enrich all fields from users and customers.

sabarasaba avatar Sep 06 '23 12:09 sabarasaba

Pinging @elastic/es-data-management (Team:Data Management)

elasticsearchmachine avatar Sep 06 '23 12:09 elasticsearchmachine

+1 this would be a great feature

bwalsh avatar Feb 17 '24 14:02 bwalsh

+1 Absolutely would be a great feature.

timtutt avatar Jun 21 '24 18:06 timtutt