Specifying Index Parameters using the Management Module
Edit your sensor by clicking
(the edit button) next your sensor in the Management Module.
Click the Advanced button next to Save and Cancel.
The Management Module expands the panel to display the Advanced fields.
Enter index configuration information for your sensor.
Click the Raw JSON field and set the alert field to
"type": "nested"
:}, "alert": { "type": "nested" }
If this field is not set, Elasticsearch can throw an error and the field will not be queryable.
Click
to save your changes and push your configuration to ZooKeeper.