|
|
|
|
|
|
by atombender
600 days ago
|
|
|
The query layer would of course handle this. ELK has KQL, which could do it for you, but it doesn't. That's why I'm saying it's a design mistake. If your data mixes data types, I would argue that your report (whatever that is) _should_ get two columns. |
|
|