github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-23 17:28:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

Review comments

Browse source
This commit is contained in:
Kaarina Tungseth 2021-05-11 11:40:09 -05:00
parent 15b3b1e869
commit 537732a5cf
1 changed files with 6 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

18
docs/management/manage-index-patterns.asciidoc
View file

@ -7,27 +7,21 @@ To customize the data fields in your index pattern, you can add runtime fields t
[[runtime-fields]]
=== Explore your data with runtime fields
Runtime fields are fields that you add to documents after you've ingested, and are evaluated at query time. With runtime fields, you allow for a smaller index and
faster ingest time so that you can use less resources and reduce your operating costs.
Runtime fields are fields that you add to documents after you've ingested, and are evaluated at query time. With runtime fields, you allow for a smaller index and faster ingest time so that you can use less resources and reduce your operating costs. You can use runtime fields anywhere index patterns are used.
When you use runtime fields, you can:
* Add fields to existing documents without reindexing your data.
* Start working on your data without first understanding the structure.
* Define fields for a specific use without modifying the underlying schema.
* Override the returned values from index fields.
* Define fields for a specific use without modifying the underlying schema.
* Start working on your data without first understanding the structure.
You can view runtime field data in *Discover*, create visualizations with runtime fields using the visualization editors, and create alerts for runtime fields.
* Add fields to existing documents without reindexing your data.
The following visualization editors support runtime fields:
* Explore runtime field data in *Discover*.
* *Lens*
* *Maps*
* *TSVB*
* *Aggregation-based*
* Create visualizations with runtime field data using *Lens*.
WARNING: Runtime fields can impact {kib} performance. When you run a query, {es} uses the fields you index first to shorten the response time.
Index the fields that you commonly search for and filter on, such as `timestamp`, then use runtime fields to limit the number of fields {es} uses to calculate values.