After upgrade to 7.8 kibana is suddenly showing a lot of non-existing fields in the table view

Elastic Stack Kibana
1

We upgraded elasticsearch/kibana to 7.8 from 7.7. All went well, except for one weird thing. If I go into discover and look at documents (all server logs) in one of our indices (using the table view), kibana is not only showing the fields actually in the index, but also a few dozen other fields, all date fields for some reason. Things like cef.extensions.agentReceiptTime, misp.threat_indicator.valid_from, etc etc. Dozens of them. If I fetch that same document through the API, those fields of course don't exist. It's just kibana showing them.

Any idea what this could be and how to get rid of it?

2

Here's a list of all the Breaking Changes in Kibana 7.8.

3

You say that as if there is some obvious breaking change i missed, but of course I looked at breaking changes and i didn't see anything that jumped out. If you're referring to a specific breaking change mind telling me which one causes this?

4

Hey @corbosman,

This was identified as an issue in 7.8.0, and will be fixed in 7.8.1: https://github.com/elastic/kibana/issues/69545

5

Hi Larry, thanks for letting me know, much appreciated.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.