Native ElasticSearch connector can be used for real-time reports (pivot tables, charts, datagrids) and ad-hoc queries without need to use Elastic Quert DSL directly. You may found that in many cases SeekTable can be a good alternative to Kibana; also it allows you to publish live web reports by ElasticSearch in a simple way.
If everything is fine you should see a new cube dashboard with the list of available dimensions/measures.
In case of connection error you'll see an orange box with the error message; don't forget to ensure that ElasticSearch API can be accessed by SeekTable server and it is not blocked by firewall.
If you specified "Infer dimensions and measures" option and get a cube with no dimensions most likely you've specified non-existing mapping type in "Doc Type".
Field: dimension value is a document field or script field (script code should be provided as first "Parameter").
Expression: dimension is defined as calculated field with custom formula that uses another dimensions as arguments (formula and arguments should be specified in "Parameters").
Fieldthis is document or sub-document field specifier.
Field: you can specify custom script field with "painless" expression syntax. For example:
(doc["registered"].empty ? null : doc["registered"].date.year)(extracts year value from "registered" date field). Also you can specify "number" for 2-nd parameter if script result is a number (this affects sorting in flat table reports).
Expression: you can specify custom formula (1-st parameter) and dimension names for the arguments (2-nd, 3-rd etc parameter).
Count: the number of aggregated documents.
Sum: the total sum of a numeric field.
Average: the average value of a numeric field.
Min: the minimal value of a column.
Max: the maximum value of a column.
FirstValue: custom acummulator aggregation pipeline expression.
Expression: measure defined as calculated field.
Count: no parameters needed.
Max: document field or field path to aggregate.
Expression: first parameter is formula expression, and next parameters are names of measures used as arguments in the expression.
some_text_field] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory. Alternatively use a keyword field instead.
This error appears when you try to aggregate by text field and your ElasticSearch index doesn't have original values for this field.
In most cases you can use
.keyword suffix and enable unindexed values for aggregation as described in
official ElasticSearch documentation.