# After "\_source" : { "enabled" : false } , I am not able to see data in discover tab?

**URL:** <https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331>\
**Category:** Kibana\
**Created:** [March 14, 2016, 1:25pm UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331 "2016-03-14T13:25:38Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 14, 2016, 1:25pm UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/1 "2016-03-14T13:25:38Z")

</div>

Hi Experts,

I have the following Mapping for my index .  
{  
"template\_main":{  
"template" : "cef\*",  
"settings" : {  
"number\_of\_shards" : 5,  
"index.cache.field.type" : "soft",  
"index.refresh\_interval" : "5s",  
"index.store.compress.stored" : true,  
"index.routing.allocation.total\_shards\_per\_node" : 5,  
"index":{  
"analysis":{  
"analyzer":{  
"analyzer\_keyword":{  
"type" : "custom",  
"tokenizer": "standard",  
"filter": ["lowercase", "stop"]  
}  
}  
}  
}  
},

```
 "mappings" : {
        "_default_" : {
            "_all" : {"enabled" : false},
"_source" : { "enabled" : false },
                        "properties" : {
                        "rt": {"type": "date","store":"yes","include_in_all" : true},
                        "alertmsg": {"type": "string","store":"yes","include_in_all" : true}
                                }
                        }
                }
        }
}

```

since I am storing 2 field rt and alertmsg why I cannot see anything in discover tab ? Any idea what I am missing.

Thanks  
VG

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 15, 2016, 2:50am UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/2 "2016-03-15T02:50:32Z")

</div>

Did you set a default field to search instead of `_all`? Cause that is what KB uses unless you specify something.

Also, why are you disabling `_source` _and_ `_all`?

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 16, 2016, 9:26am UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/3 "2016-03-16T09:26:09Z")

</div>

> Did you set a default field to search instead of \_all? Cause that is what KB uses unless you specify something.

I see what are you saying , since I do not want KB to search \_all so i disabled it , but yes I did not set any default field to search , will do that and check .

> Also, why are you disabling \_source and \_all?

I only want to store some fields out of 180 fields , also with this I will consume less disk space also query will be much faster .That is why I am disabling \_source as well.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 16, 2016, 8:08pm UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/4 "2016-03-16T20:08:15Z")

</div>

You also won't be able to leverage the reindex API when it comes.

---

<div class="post-metadata">

**Author:** ![vikas\_gopal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vikas_gopal/32/47661_2.png) [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Post date:** [March 17, 2016, 6:54am UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/5 "2016-03-17T06:54:09Z")

</div>

ok, so does that mean I cannot reindex from an existing Index something like index from index ? . Because if this is the case i usually avoid as i prefer complete reindexing .

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 17, 2016, 10:17pm UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/6 "2016-03-17T22:17:31Z")

</div>

That is correct.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:58pm UTC](https://discuss.elastic.co/t/after--source-enabled-false-i-am-not-able-to-see-data-in-discover-tab/44331/7 "2017-07-06T13:58:43Z")

</div>