Kibana添加filter

字段生成

自动同步ES mapping

手动添加ES mapping

（1）添加loglvl字段

POST thaipay/_mappings
{
  "properties": {
    "loglvl": {
      "type": "text",
      "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 16
          }
        }
    }
  }
}

（2）添加appname字段

POST thaipay/_mappings
{
  "properties": {
    "appname": {
      "type": "text",
      "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 128
          }
        }
    }
  }
}

（3）添加traceid字段

POST thaipay/_mappings
{
  "properties": {
    "traceid": {
      "type": "text",
      "fields": {
          "keyword": {
            "type": "keyword",
            "ignore_above": 32
          }
        }
    }
  }
}

（4）查询字段

GET thaipay/_mappings
GET thaipay/_mapping/field/appname

刷新字段

打开Kibana -> Management -> Kibana -> Index Patterns -> 选择Index -> 右上角刷新图标Refresh field list

过滤字段

打开Kibana -> Discover -> Add filter -> 选择Filed和Operator，如

Field为appname.keyword，Operator为is