elastic / elasticsearch

Free and Open, Distributed, RESTful Search Engine
https://www.elastic.co/products/elasticsearch
Other
69.4k stars 24.56k forks source link

[Enrich Policies] Allow use of * to enrich all fields from the selected indices #99240

Open sabarasaba opened 1 year ago

sabarasaba commented 1 year ago

We have recently started working on adding enrich policies support in kibana and one thing we noticed is that when creating a policy if a use selects 2 indices and then wants to enrich all the fields from those indices we will have to send a huge list of fields in the payload to the api. We were wondering if it would be possible to instead support a wildcard like * to force the policy to enrich all the fields from all the indices? Something like:

PUT /_enrich/policy/my-policy
{
  "match": {
    "indices": ["users", "customers"],
    "match_field": "email",
    "enrich_fields": "*"
  }
}

Meaning that it will enrich all fields from users and customers.

elasticsearchmachine commented 1 year ago

Pinging @elastic/es-data-management (Team:Data Management)

bwalsh commented 6 months ago

+1 this would be a great feature

timtutt commented 2 months ago

+1 Absolutely would be a great feature.