Operations | Monitoring | ITSM | DevOps | Cloud

Creating a Day of Week Runtime Field and Using It in Kibana

The video contains a demonstration of the creation of a runtime field in which the day of the week is calculated from a timestamp field that contains the date. A visualization is then created in Kibana Lens using an indexed field and the newly created runtime field. Runtime field is the name given to the implementation of schema on read in Elasticsearch.

Shadow an Indexed Field With a Runtime Field to Fix Errors

The video contains a demonstration of using a runtime field to fix errors in the indexed data. We intentionally index documents with some errors, and then use a runtime field to shadow the indexed field. The demonstration shows how a user querying the data or creating a visualization in Kibana Lens will see the correct information, which is calculated in the runtime field. This scenario allows for immediate fixing of errors in the indexed data by shadowing them with runtime fields (instead of reindexing). Runtime field is the name given to the implementation of schema on read in Elasticsearch.