On the sample dataset
host.name |kibana.alert.risk_score
---------------+-----------------------
test-host-1 |21.0
test-host-2 |17.0
but if we override all the attributes
from alerts | eval host.name = 1, kibana.alert.risk_score = 2
<all-fields-projected>| host.name |kibana.alert.risk_score
----------------------+---------------+-----------------------
null |1 |2
null |1 |2
...
On the sample dataset
but if we override all the attributes