quickwit-datasource
quickwit-datasource copied to clipboard
text fields do not show its value preview under filter
I think that what it is going on is that the plugin is considering the field mapping as 'text' in the context of Elasticsearch, where there is a distinguish between 'text' and 'keyword' types.
I guess that for the values to be previewed the quickwit-datasource plugin expects 'keyword' type
destination.ip is type: ip
destination.mac is type: text
type: u64 fields do not show its value preview either
thanks @enotspe for the feedback. Can you check that destination.map is a fast field?
It is indeed a fast field.
I have tried raw and default tokenizer.
It does not preview numeric fields either, type: u64