Description
Below two Salesforce dashboards panels uses _id field:
| Dashboard |
Panel |
Data stream |
| [Logs Salesforce] Setup Audit Trail Dashboard |
Changes made in the setup |
Setup audit trail |
| [Logs Salesforce] Login Dashboard |
Login events table |
Login rest |
These visualizaions are working as expected till 8.4.0 and 8.5.0. But in Kibana 8.6.0 and later versions it shows below error.


According to documention _id fields are not supported in aggregations:
The _id field is restricted from use in aggregations, sorting, and scripting. In case sorting or aggregating on the _id field is required, it is advised to duplicate the content of the _id field into another field that has doc_values enabled.
Related Issues
Description
Below two Salesforce dashboards panels uses _id field:
These visualizaions are working as expected till 8.4.0 and 8.5.0. But in Kibana 8.6.0 and later versions it shows below error.
According to documention _id fields are not supported in aggregations:
Related Issues