Logs are not easily queryable from elasticsearch (ES6)

[sobvan]

Requirement - what kind of business use case are you trying to solve?

I want to query logs as nested fields by using elastic's nested query

Problem - what in Jaeger blocks you from solving the requirement?

There is a missing "type": "nested" field in the elastic mapping for "log" filed of the span type.

Proposal - what do you suggest to solve the problem or improve the existing situation?

...
          "logs" : {
            "type" : "nested",
            "dynamic" : "false",
...

Notes for queryable logs

I used this query to search for logs:

GET jaeger-span-*/_search?filter_path=took,hits.hits._source
{
  "_source": ["logs.timestamp", "logs.fields.key", "logs.fields.tagType", "logs.fields.value"],
  "query": {
    "nested": {
      "path": "logs.fields",
      "query": {
        "bool": {
          "must_not": [
            {"wildcard": { "logs.fields.value": "anything*you*want" }}
            ]
        }
      }
    }
  }
}