# 7.16.1 - All beats docs in Discover had unknown field and value as json **URL:** \ **Category:** Kibana\ **Created:** [December 15, 2021, 4:21pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017 "2021-12-15T16:21:20Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Zabulon](https://avatars.discourse-cdn.com/v4/letter/z/b3f665/32.png) [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Post date:** [December 15, 2021, 4:21pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/1 "2021-12-15T16:21:20Z")
Hi, Yeserday, I upgraded one of our cluster from 7.13.4 to 7.16.1. When I'm going to discover pane and choose a beat index, almost all field show as 'unknown field' and the values are showing as JSON. ![kibana_discover_problem_mod](https://us1.discourse-cdn.com/elastic/original/3X/0/5/051740165964c4aaf68666b833092ad81330e1d6.jpeg) The other cluster is still in 7.13.4 and the beat docs in discover pane looks like it supposed to: ![kibana_discover_prod_7.13.4_mod](https://us1.discourse-cdn.com/elastic/original/3X/7/b/7b84dfa0f0eb2f6e414b4dc94309e4579f16eccd.jpeg) If you have any insight it would be appreciate !! Thank you Dominic ---
**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\ **Post date:** [December 15, 2021, 4:32pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/2 "2021-12-15T16:32:04Z")
Hi I'd be interested how the response of the agent field looks like when it's displayed in INSPECT ![Discover_-_Elastic](https://us1.discourse-cdn.com/elastic/original/3X/4/6/466e062b175a4540146675d401db4ffd61082715.png) And about the fields, looking at the sidebar, what's displayed for agent? What's displayed when you deactivate "Hide empty fields" ![Bildschirmfoto 2021-12-15 um 17.29.48](https://us1.discourse-cdn.com/elastic/original/3X/d/3/d3d2d258aba08e826351b6aa801491bae6f865d3.png) thx and best, Matthias ---
**Author:** ![Zabulon](https://avatars.discourse-cdn.com/v4/letter/z/b3f665/32.png) [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Post date:** [December 15, 2021, 4:49pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/3 "2021-12-15T16:49:21Z")
Hi Matthias, There is the INSPECT portion of two different filebeat version: ![kibana_discover_problem_inspector_2](https://us1.discourse-cdn.com/elastic/original/3X/a/0/a07a0b70126a350f76b5dcedba7e99d38e029925.jpeg) ![kibana_discover_problem_inspector](https://us1.discourse-cdn.com/elastic/original/3X/9/b/9bc4dadabf4e777e76ab1276040ffbe20490786f.jpeg) And there is the sidebar parts: ![kibana_discover_problem_sidebar](https://us1.discourse-cdn.com/elastic/original/3X/9/2/92ecbae4f4205a625f958ffe809a4c13fca878ec.jpeg) Thank you ! Dominic ---
**Author:** ![Zabulon](https://avatars.discourse-cdn.com/v4/letter/z/b3f665/32.png) [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Post date:** [December 15, 2021, 5:04pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/4 "2021-12-15T17:04:42Z")
Hi Matthias, I think I resolved my issue. I turned off the setting "discover:searchFieldsFromSource" and it work fine. ![kibana_discover_problem_read_source](https://us1.discourse-cdn.com/elastic/original/3X/e/3/e3a137036e1a0941ce666e9b92af9242cabb8431.jpeg) result: ![kibana_discover_problem_resolved](https://us1.discourse-cdn.com/elastic/original/3X/b/a/ba360eebdc144ec4889b40cd25c9ef9afe3e7571.jpeg) Thank you very much for your help ! Dominic ---
**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\ **Post date:** [December 15, 2021, 5:07pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/5 "2021-12-15T17:07:04Z")
thank you. I'd be interested, if you'd switch `discover:searchFieldsFromSource` to `Off` if this would work in this case? ![Bildschirmfoto 2021-12-15 um 18.04.09](https://us1.discourse-cdn.com/elastic/original/3X/5/e/5e0c496305b42dd3e797dac56cb1b669070e2ea7.png) ---
**Author:** ![Zabulon](https://avatars.discourse-cdn.com/v4/letter/z/b3f665/32.png) [@Zabulon](https://discuss.elastic.co/u/Zabulon)\ **Post date:** [December 15, 2021, 5:18pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/6 "2021-12-15T17:18:25Z")
Hi Matthias, Like I said in the my last post , Yes it resolved the issue.. Thank you very much ! Dominic ---
**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\ **Post date:** [December 15, 2021, 6:26pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/7 "2021-12-15T18:26:46Z")
Cool, didn't see your post, so we seem to have posted synchronously 🙂 All the best! Matthias ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 12, 2022, 6:27pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017/8 "2022-01-12T18:27:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.