Correctly read dataset from sample message documents

elastic · Mar 11, 2020 · e283dc8 · e283dc8
1 parent aea5ece
commit e283dc8
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/x-pack/plugins/infra/server/lib/log_analysis/log_entry_categories_analysis.ts b/x-pack/plugins/infra/server/lib/log_analysis/log_entry_categories_analysis.ts
@@ -519,8 +519,8 @@ export class LogEntryCategoriesAnalysis {
 
     return {
       examples: hits.map(hit => ({
-        dataset: hit._source['event.dataset'] ?? '',
-        message: hit._source.message,
+        dataset: hit._source.event?.dataset ?? '',
+        message: hit._source.message ?? '',
         timestamp: hit.sort[0],
       })),
       timing: {

diff --git a/x-pack/plugins/infra/server/lib/log_analysis/queries/log_entry_category_examples.ts b/x-pack/plugins/infra/server/lib/log_analysis/queries/log_entry_category_examples.ts
@@ -55,8 +55,10 @@ export const createLogEntryCategoryExamplesQuery = (
 });
 
 export const logEntryCategoryExampleHitRT = rt.type({
-  _source: rt.type({
-    'event.dataset': rt.union([rt.string, rt.undefined]),
+  _source: rt.partial({
+    event: rt.partial({
+      dataset: rt.string,
+    }),
     message: rt.string,
   }),
   sort: rt.tuple([rt.number]),