Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DataViews] Import of dashboards saved objects only containing ES|QL based embeddables needs persisted data views to be assigned #170271

Closed
kertal opened this issue Oct 31, 2023 · 7 comments
Labels
bug Fixes for quality problems that affect the customer experience Feature:Dashboard Dashboard related features Feature:Saved Objects Management Team:Core Core services & architecture: plugins, logging, config, saved objects, http, ES client, i18n, etc Team:Presentation Presentation Team for Dashboard, Input Controls, and Canvas triage_needed

Comments

@kertal
Copy link
Member

kertal commented Oct 31, 2023

Kibana version:
main, high likely 8.11

Describe the bug:
When importing a dashboard that only contains ES|QL based embeddable, there need to be persisted data views assigned for a successful import

Steps to reproduce:

  1. Create a dashboard with only ES|QL based embeddables (you can do this in Discover) Discover_-_Elastic
  2. Export this dashboard in Saved objects, there's a message about "Some related objects could not be found"
  3. Delete the exported dashboard or import at another instance in Saved objects, now persisted data views need to be assigned that the import is successful, here's a zipped export for quickly trying
    esql_dashboard 2.ndjson.zip

Bildschirmfoto 2023-10-31 um 18 58 39

Expected behavior:
Neither there should be a message when exporting about missing related objects, nor it should be necessary to assign persisted data views

@kertal kertal added the bug Fixes for quality problems that affect the customer experience label Oct 31, 2023
@botelastic botelastic bot added the needs-team Issues missing a team label label Oct 31, 2023
@kertal kertal added the Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. label Oct 31, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-data-discovery (Team:DataDiscovery)

@botelastic botelastic bot removed the needs-team Issues missing a team label label Oct 31, 2023
@kertal
Copy link
Member Author

kertal commented Nov 7, 2023

I figured out this message is displayed in saved_objects_management, therefore reassigning to @elastic/kibana-core team

@kertal kertal added the Team:Core Core services & architecture: plugins, logging, config, saved objects, http, ES client, i18n, etc label Nov 7, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-core (Team:Core)

@kertal kertal added Feature:Saved Objects Management and removed Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. labels Nov 7, 2023
@pgayvallet
Copy link
Contributor

pgayvallet commented Nov 8, 2023

Not sure what you are expecting from the Core team here @kertal?

Looking at the example export you provided (thank you), your dashboard is supposed to be referencing 6 data-views

{
  "attributes": {
    "description": "",
    "kibanaSavedObjectMeta": {
      "searchSourceJSON": "{\"query\":{\"query\":\"\",\"language\":\"kuery\"},\"filter\":[]}"
    },
    "optionsJSON": "{\"useMargins\":true,\"syncColors\":false,\"syncCursor\":true,\"syncTooltips\":false,\"hidePanelTitles\":false}",
    "panelsJSON": "[{\"type\":\"lens\",\"gridData\":{\"x\":0,\"y\":0,\"w\":24,\"h\":15,\"i\":\"0c1e6abb-b96f-48f5-b4fd-76341fe05004\"},\"panelIndex\":\"0c1e6abb-b96f-48f5-b4fd-76341fe05004\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"d578c1f2-0d8b-4231-9bba-019cff432438\":{\"index\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"},\"columns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[],\"initialContext\":{\"dataViewSpec\":{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":0,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"d578c1f2-0d8b-4231-9bba-019cff432438\",\"seriesType\":\"bar_stacked\",\"xAccessor\":\"@timestamp every 30 second\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\":{\"id\":\"cb855fc7-99a6-477a-aff2-b81f901bf7c3\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":15,\"w\":24,\"h\":15,\"i\":\"6dcf9a0d-b6b0-4504-b6d0-6d1128898597\"},\"panelIndex\":\"6dcf9a0d-b6b0-4504-b6d0-6d1128898597\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"0de0720f-ab17-4eaf-ac49-68e87689a8e7\":{\"index\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"},\"columns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 30 second\",\"fieldName\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeField\":\"@timestamp\"}],\"initialContext\":{\"dataViewSpec\":{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":0,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 30 second\",\"name\":\"@timestamp every 30 second\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\\n        | EVAL timestamp=DATE_TRUNC(30 second, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 30 second`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs | limit 10\"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"0de0720f-ab17-4eaf-ac49-68e87689a8e7\",\"seriesType\":\"area\",\"xAccessor\":\"@timestamp every 30 second\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\":{\"id\":\"d2f12af2-72bc-4007-92ff-7f474a5a48a6\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}},{\"type\":\"search\",\"gridData\":{\"x\":0,\"y\":15,\"w\":24,\"h\":15,\"i\":\"0396ed61-522b-4d9c-9dfd-bcea9d62d164\"},\"panelIndex\":\"0396ed61-522b-4d9c-9dfd-bcea9d62d164\",\"embeddableConfig\":{\"enhancements\":{}},\"panelRefName\":\"panel_0396ed61-522b-4d9c-9dfd-bcea9d62d164\"},{\"type\":\"lens\",\"gridData\":{\"x\":24,\"y\":0,\"w\":24,\"h\":15,\"i\":\"06f8745a-d6af-4c6d-b2fb-2e51649885fc\"},\"panelIndex\":\"06f8745a-d6af-4c6d-b2fb-2e51649885fc\",\"embeddableConfig\":{\"attributes\":{\"title\":\"Bar vertical stacked\",\"references\":[{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"name\":\"indexpattern-datasource-current-indexpattern\",\"type\":\"index-pattern\"},{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"name\":\"indexpattern-datasource-layer-unifiedHistogram\",\"type\":\"index-pattern\"}],\"state\":{\"datasourceStates\":{\"textBased\":{\"layers\":{\"1e538403-acef-47ec-8fbe-5583b3a9cb7d\":{\"index\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"query\":{\"esql\":\"from kibana_sample_data_logs \\n        | EVAL timestamp=DATE_TRUNC(12 hour, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 12 hour`\"},\"columns\":[{\"columnId\":\"@timestamp every 12 hour\",\"fieldName\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"allColumns\":[{\"columnId\":\"@timestamp every 12 hour\",\"fieldName\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"columnId\":\"rows\",\"fieldName\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"timeField\":\"@timestamp\"}},\"fieldList\":[{\"id\":\"@timestamp every 12 hour\",\"name\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"indexPatternRefs\":[{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeField\":\"@timestamp\"}],\"initialContext\":{\"dataViewSpec\":{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fields\":{\"@timestamp\":{\"count\":0,\"name\":\"@timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_id\":{\"count\":0,\"name\":\"_id\",\"type\":\"string\",\"esTypes\":[\"_id\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_index\":{\"count\":0,\"name\":\"_index\",\"type\":\"string\",\"esTypes\":[\"_index\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_score\":{\"count\":0,\"name\":\"_score\",\"type\":\"number\",\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"_source\":{\"count\":0,\"name\":\"_source\",\"type\":\"_source\",\"esTypes\":[\"_source\"],\"scripted\":false,\"searchable\":false,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"_source\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent\":{\"count\":1,\"name\":\"agent\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"agent.keyword\":{\"count\":0,\"name\":\"agent.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"agent\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes\":{\"count\":0,\"name\":\"bytes\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_counter\":{\"count\":0,\"name\":\"bytes_counter\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"bytes_gauge\":{\"count\":0,\"name\":\"bytes_gauge\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"clientip\":{\"count\":0,\"name\":\"clientip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"event.dataset\":{\"count\":0,\"name\":\"event.dataset\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension\":{\"count\":0,\"name\":\"extension\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"extension.keyword\":{\"count\":0,\"name\":\"extension.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"extension\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.coordinates\":{\"count\":0,\"name\":\"geo.coordinates\",\"type\":\"geo_point\",\"esTypes\":[\"geo_point\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"geo_point\",\"params\":{\"transform\":\"wkt\"}},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.dest\":{\"count\":0,\"name\":\"geo.dest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.src\":{\"count\":0,\"name\":\"geo.src\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"geo.srcdest\":{\"count\":0,\"name\":\"geo.srcdest\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host\":{\"count\":0,\"name\":\"host\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"host.keyword\":{\"count\":0,\"name\":\"host.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"host\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index\":{\"count\":0,\"name\":\"index\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"index.keyword\":{\"count\":0,\"name\":\"index.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"index\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip\":{\"count\":0,\"name\":\"ip\",\"type\":\"ip\",\"esTypes\":[\"ip\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"ip\"},\"shortDotsEnable\":false,\"isMapped\":true},\"ip_range\":{\"count\":0,\"name\":\"ip_range\",\"type\":\"ip_range\",\"esTypes\":[\"ip_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os\":{\"count\":0,\"name\":\"machine.os\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.os.keyword\":{\"count\":0,\"name\":\"machine.os.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"machine.os\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"machine.ram\":{\"count\":0,\"name\":\"machine.ram\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"memory\":{\"count\":0,\"name\":\"memory\",\"type\":\"number\",\"esTypes\":[\"double\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message\":{\"count\":0,\"name\":\"message\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"message.keyword\":{\"count\":0,\"name\":\"message.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"message\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"phpmemory\":{\"count\":0,\"name\":\"phpmemory\",\"type\":\"number\",\"esTypes\":[\"long\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"number\"},\"shortDotsEnable\":false,\"isMapped\":true},\"referer\":{\"count\":0,\"name\":\"referer\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request\":{\"count\":0,\"name\":\"request\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"request.keyword\":{\"count\":0,\"name\":\"request.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"request\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response\":{\"count\":0,\"name\":\"response\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"response.keyword\":{\"count\":0,\"name\":\"response.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"response\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags\":{\"count\":0,\"name\":\"tags\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"tags.keyword\":{\"count\":0,\"name\":\"tags.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"tags\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp\":{\"count\":0,\"name\":\"timestamp\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true},\"timestamp_range\":{\"count\":0,\"name\":\"timestamp_range\",\"type\":\"date_range\",\"esTypes\":[\"date_range\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url\":{\"count\":0,\"name\":\"url\",\"type\":\"string\",\"esTypes\":[\"text\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":false,\"readFromDocValues\":false,\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"url.keyword\":{\"count\":0,\"name\":\"url.keyword\",\"type\":\"string\",\"esTypes\":[\"keyword\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"subType\":{\"multi\":{\"parent\":\"url\"}},\"format\":{\"id\":\"string\"},\"shortDotsEnable\":false,\"isMapped\":true},\"utc_time\":{\"count\":0,\"name\":\"utc_time\",\"type\":\"date\",\"esTypes\":[\"date\"],\"scripted\":false,\"searchable\":true,\"aggregatable\":true,\"readFromDocValues\":true,\"format\":{\"id\":\"date\"},\"shortDotsEnable\":false,\"isMapped\":true}},\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"},\"fieldName\":\"\",\"textBasedColumns\":[{\"id\":\"@timestamp every 12 hour\",\"name\":\"@timestamp every 12 hour\",\"meta\":{\"type\":\"date\"}},{\"id\":\"rows\",\"name\":\"rows\",\"meta\":{\"type\":\"number\"}}],\"query\":{\"esql\":\"from kibana_sample_data_logs \\n        | EVAL timestamp=DATE_TRUNC(12 hour, @timestamp) | stats rows = count(*) by timestamp | rename timestamp as `@timestamp every 12 hour`\"}}}},\"filters\":[],\"query\":{\"esql\":\"from kibana_sample_data_logs \"},\"visualization\":{\"legend\":{\"isVisible\":true,\"position\":\"right\"},\"valueLabels\":\"hide\",\"fittingFunction\":\"None\",\"axisTitlesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"tickLabelsVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"labelsOrientation\":{\"x\":0,\"yLeft\":0,\"yRight\":0},\"gridlinesVisibilitySettings\":{\"x\":true,\"yLeft\":true,\"yRight\":true},\"preferredSeriesType\":\"bar_stacked\",\"layers\":[{\"layerId\":\"1e538403-acef-47ec-8fbe-5583b3a9cb7d\",\"seriesType\":\"area\",\"xAccessor\":\"@timestamp every 12 hour\",\"accessors\":[\"rows\"],\"layerType\":\"data\",\"colorMapping\":{\"assignmentMode\":\"auto\",\"assignments\":[],\"specialAssignments\":[{\"rule\":{\"type\":\"other\"},\"color\":{\"type\":\"categorical\",\"paletteId\":\"neutral\",\"colorIndex\":1},\"touched\":false}],\"paletteId\":\"eui_amsterdam_color_blind\",\"colorMode\":{\"type\":\"categorical\"}}}]},\"adHocDataViews\":{\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\":{\"id\":\"b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d\",\"title\":\"kibana_sample_data_logs\",\"timeFieldName\":\"@timestamp\",\"sourceFilters\":[],\"fieldFormats\":{},\"runtimeFieldMap\":{},\"fieldAttrs\":{},\"allowNoIndex\":false,\"name\":\"kibana_sample_data_logs\"}}},\"visualizationType\":\"lnsXY\",\"type\":\"lens\",\"description\":\"\"},\"enhancements\":{}}}]",
    "timeRestore": false,
    "title": "AdHoc data view field list loading test",
    "version": 1
  },
  "coreMigrationVersion": "8.8.0",
  "created_at": "2023-10-25T12:31:11.703Z",
  "id": "fa271b30-7249-11ee-ae04-9dddb3904d3b",
  "managed": false,
  "references": [
    {
      "id": "cb855fc7-99a6-477a-aff2-b81f901bf7c3",
      "name": "0c1e6abb-b96f-48f5-b4fd-76341fe05004:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "cb855fc7-99a6-477a-aff2-b81f901bf7c3",
      "name": "0c1e6abb-b96f-48f5-b4fd-76341fe05004:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    },
    {
      "id": "d2f12af2-72bc-4007-92ff-7f474a5a48a6",
      "name": "6dcf9a0d-b6b0-4504-b6d0-6d1128898597:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "d2f12af2-72bc-4007-92ff-7f474a5a48a6",
      "name": "6dcf9a0d-b6b0-4504-b6d0-6d1128898597:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    },
    {
      "id": "fa9d98d0-724b-11ee-ae04-9dddb3904d3b",
      "name": "0396ed61-522b-4d9c-9dfd-bcea9d62d164:panel_0396ed61-522b-4d9c-9dfd-bcea9d62d164",
      "type": "search"
    },
    {
      "id": "b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d",
      "name": "06f8745a-d6af-4c6d-b2fb-2e51649885fc:indexpattern-datasource-current-indexpattern",
      "type": "index-pattern"
    },
    {
      "id": "b7f1be8f-abf1-4ac6-aea7-2afc6e1aff9d",
      "name": "06f8745a-d6af-4c6d-b2fb-2e51649885fc:indexpattern-datasource-layer-unifiedHistogram",
      "type": "index-pattern"
    }
  ],
  "type": "dashboard",
  "typeMigrationVersion": "8.9.0",
  "updated_at": "2023-10-25T12:31:11.703Z",
  "version": "WzIwOCwxXQ=="
}

If those references are not found, it's the expected behavior from the export UI to warn about it, and it's the expected behavior from the import UI to ask to reassign the missing data-views.

If your ESQL-only dashboard is supposed to not have index patterns, I would probably try to understand why there effectively are index patterns referenced by the said dashboard?

@pgayvallet pgayvallet added the Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. label Nov 8, 2023
@kertal
Copy link
Member Author

kertal commented Nov 8, 2023

Not sure what you are expecting from the Core team here @kertal?

@pgayvallet Was looking for feedback like this, thx!

If your ESQL-only dashboard is supposed to not have index patterns, I would probably try to understand why there effectively are index patterns referenced by the said dashboard?

Ok , I see what we need to check is why those ad-hoc data views are referenced on a Dashboard, I've just checked, and when I export and import saved searches based on ad-hoc data views or ES|QL in Discover, it works out of the box

dear @elastic/kibana-presentation team, could you have a look?

@kertal kertal added the Team:Presentation Presentation Team for Dashboard, Input Controls, and Canvas label Nov 8, 2023
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-presentation (Team:Presentation)

@kertal kertal added the Feature:Dashboard Dashboard related features label Nov 8, 2023
@kertal kertal removed the Team:DataDiscovery Discover, search (e.g. data plugin and KQL), data views, saved searches. For ES|QL, use Team:ES|QL. label Nov 21, 2023
@stratoula
Copy link
Contributor

I solved this with #190296

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Feature:Dashboard Dashboard related features Feature:Saved Objects Management Team:Core Core services & architecture: plugins, logging, config, saved objects, http, ES client, i18n, etc Team:Presentation Presentation Team for Dashboard, Input Controls, and Canvas triage_needed
Projects
None yet
Development

No branches or pull requests

4 participants