elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.75k stars 8.15k forks source link

[DataViews] Import of dashboards saved objects only containing ES|QL based embeddables needs persisted data views to be assigned #170271

Closed kertal closed 1 month ago

kertal commented 11 months ago

Kibana version: main, high likely 8.11

Describe the bug: When importing a dashboard that only contains ES|QL based embeddable, there need to be persisted data views assigned for a successful import

Steps to reproduce:

  1. Create a dashboard with only ES|QL based embeddables (you can do this in Discover) Discover_-_Elastic
  2. Export this dashboard in Saved objects, there's a message about "Some related objects could not be found"
  3. Delete the exported dashboard or import at another instance in Saved objects, now persisted data views need to be assigned that the import is successful, here's a zipped export for quickly trying esql_dashboard 2.ndjson.zip

Bildschirmfoto 2023-10-31 um 18 58 39

Expected behavior: Neither there should be a message when exporting about missing related objects, nor it should be necessary to assign persisted data views

elasticmachine commented 11 months ago

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

kertal commented 10 months ago

I figured out this message is displayed in saved_objects_management, therefore reassigning to @elastic/kibana-core team

elasticmachine commented 10 months ago

Pinging @elastic/kibana-core (Team:Core)

pgayvallet commented 10 months ago

Not sure what you are expecting from the Core team here @kertal?

Looking at the example export you provided (thank you), your dashboard is supposed to be referencing 6 data-views

{
  "attributes": {
    "description": "",
    "kibanaSavedObjectMeta": {
      "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"
    },
    "optionsJSON": "{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}",
    "panelsJSON": "[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"0c1e6abb-b96f-48f5-b4fd-76341fe05004\"},\"panelIndex\":\"0c1e6abb-b96f-48f5-b4fd-76341fe05004\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"d578c1f2-0d8b-4231-9bba-019cff432438\":{\"index\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"},\"columns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[],\"initialContext\":{\"dataViewSpec\":{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":0,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"d578c1f2-0d8b-4231-9bba-019cff432438\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"@timestamp every 30 second\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\":{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":15,\"w\":24,\"h\":15,\"i\":\"6dcf9a0d-b6b0-4504-b6d0-6d1128898597\"},\"panelIndex\":\"6dcf9a0d-b6b0-4504-b6d0-6d1128898597\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"0de0720f-ab17-4eaf-ac49-68e87689a8e7\":{\"index\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"},\"columns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeField\":\"@timestamp\"}],\"initialContext\":{\"dataViewSpec\":{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":0,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0de0720f-ab17-4eaf-ac49-68e87689a8e7\",\"seriesType\":\"area\",\"xAccessor\":\"@timestamp every 30 second\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\":{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":15,\"w\":24,\"h\":15,\"i\":\"0396ed61-522b-4d9c-9dfd-bcea9d62d164\"},\"panelIndex\":\"0396ed61-522b-4d9c-9dfd-bcea9d62d164\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_0396ed61-522b-4d9c-9dfd-bcea9d62d164\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"06f8745a-d6af-4c6d-b2fb-2e51649885fc\"},\"panelIndex\":\"06f8745a-d6af-4c6d-b2fb-2e51649885fc\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"1e538403-acef-47ec-8fbe-5583b3a9cb7d\":{\"index\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"query\":{\"esql\":\"from kibana_sample_data_logs \\n        | EVAL timestamp=DATE_TRUNC(12 hour, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 12 hour`\"},\"columns\":[{\"columnId\":\"@timestamp every 12 hour\",\"fieldName\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 12 hour\",\"fieldName\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 12 hour\",\"name\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeField\":\"@timestamp\"}],\"initialContext\":{\"dataViewSpec\":{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":1,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 12 hour\",\"name\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs \\n        | EVAL timestamp=DATE_TRUNC(12 hour, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 12 hour`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs \"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"1e538403-acef-47ec-8fbe-5583b3a9cb7d\",\"seriesType\":\"area\",\"xAccessor\":\"@timestamp every 12 hour\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\":{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}}]",
    "timeRestore": false,
    "title": "AdHoc data view field list loading test",
    "version": 1
  },
  "coreMigrationVersion": "8.8.0",
  "created_at": "2023-10-25T12:31:11.703Z",
  "id": "fa271b30-7249-11ee-ae04-9dddb3904d3b",
  "managed": false,
  "references": [
    {
      "id": "cb855fc7-99a6-477a-aff2-b81f901bf7c3",
      "name": "0c1e6abb-b96f-48f5-b4fd-76341fe05004:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "cb855fc7-99a6-477a-aff2-b81f901bf7c3",
      "name": "0c1e6abb-b96f-48f5-b4fd-76341fe05004:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    },
    {
      "id": "d2f12af2-72bc-4007-92ff-7f474a5a48a6",
      "name": "6dcf9a0d-b6b0-4504-b6d0-6d1128898597:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "d2f12af2-72bc-4007-92ff-7f474a5a48a6",
      "name": "6dcf9a0d-b6b0-4504-b6d0-6d1128898597:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    },
    {
      "id": "fa9d98d0-724b-11ee-ae04-9dddb3904d3b",
      "name": "0396ed61-522b-4d9c-9dfd-bcea9d62d164:panel_0396ed61-522b-4d9c-9dfd-bcea9d62d164",
      "type": "search"
    },
    {
      "id": "b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d",
      "name": "06f8745a-d6af-4c6d-b2fb-2e51649885fc:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d",
      "name": "06f8745a-d6af-4c6d-b2fb-2e51649885fc:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    }
  ],
  "type": "dashboard",
  "typeMigrationVersion": "8.9.0",
  "updated_at": "2023-10-25T12:31:11.703Z",
  "version": "WzIwOCwxXQ=="
}

If those references are not found, it's the expected behavior from the export UI to warn about it, and it's the expected behavior from the import UI to ask to reassign the missing data-views.

If your ESQL-only dashboard is supposed to not have index patterns, I would probably try to understand why there effectively are index patterns referenced by the said dashboard?

kertal commented 10 months ago

Not sure what you are expecting from the Core team here @kertal?

@pgayvallet Was looking for feedback like this, thx!

If your ESQL-only dashboard is supposed to not have index patterns, I would probably try to understand why there effectively are index patterns referenced by the said dashboard?

Ok , I see what we need to check is why those ad-hoc data views are referenced on a Dashboard, I've just checked, and when I export and import saved searches based on ad-hoc data views or ES|QL in Discover, it works out of the box

dear @elastic/kibana-presentation team, could you have a look?

elasticmachine commented 10 months ago

Pinging @elastic/kibana-presentation (Team:Presentation)

stratoula commented 1 month ago

I solved this with https://github.com/elastic/kibana/pull/190296