Thank you @gsmith, I was hoping to fix it using pipelines, is there no other way than mapping? Here are 2 similar answers which I’m basing this on:
2017
2019
The GELF payload is in the “message” field, and I use an JSON extractor to create all the other fields. Even though the monthly_sales value is sent as a float on my end, I assumed the JSON extractor was the one turning it into a string.
So after building the pipeline and forcing this field to be numeric, it’s very disheartening to see the avg() function in the charts still throwing this error.
Does mapping apply to this situation since the field is created by the extractor? Seems like i’m missing something really simple.