# All fields are dropped that arent date fields

**URL:** <https://discuss.elastic.co/t/all-fields-are-dropped-that-arent-date-fields/218614>\
**Category:** Elasticsearch\
**Created:** [February 10, 2020, 2:50pm UTC](https://discuss.elastic.co/t/all-fields-are-dropped-that-arent-date-fields/218614 "2020-02-10T14:50:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jasonespo](https://avatars.discourse-cdn.com/v4/letter/j/898d66/32.png) [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Post date:** [February 10, 2020, 2:50pm UTC](https://discuss.elastic.co/t/all-fields-are-dropped-that-arent-date-fields/218614/1 "2020-02-10T14:50:49Z")

</div>

Hi,

I am having issues over the past few days where every single field is being dropped in a document that is not a "date" field.

Any ideas why this could be the case?

Example:

```
{
  "_index": "tid.496e3cfd-672c-47ae-9dfb-0d840b0aed80.2020.02.5",
  "_type": "_doc",
  "_id": "GYyaL3ABeXCM9bWDSY5E",
  "_version": 1,
  "_score": null,
  "fields": {
    "winlog_event_created": [
      "2020-02-10T14:56:40.028Z"
    ],
    "@timestamp": [
      "2020-02-10T14:56:41.167Z"
    ]
  },
  "sort": [
    1581346601167
  ]
}

```

Which should be:

```
{
  "_index": "tid.496e3cfd-672c-47ae-9dfb-0d840b0aed80.2020.02.5",
  "_type": "_doc",
  "_id": "SuZQF3ABvIRm3KmPzrIi",
  "_version": 1,
  "_score": null,
  "_source": {
    "process_id": 920,
    "id": "02b99d11-2d20-40f8-9fc7-7610bd7aba27",
    "host": "ACL-LP032",
    "record_number": "10290",
    "event_data": {
      "UserSid": "S-1-5-21-1879512415-1641104040-2350575588-10162",
      "TSId": "1"
    },
    "opcode": "Info",
    "type": "wineventlog",
    "thread_id": 1172,
    "provider_guid": "{dbe9b383-7cf3-4331-91cc-a3cb16a3b538}",
    "@version": "1",
    "beat": {},
    "tags": [
      "windows"
    ],
    "source_name": "Microsoft-Windows-Winlogon",
    "compass_collectorless": true,
    "computer_name": "ACL-LP032.aurigaconsulting.local",
    "compass_device_id": "7889f402-3509-4ecb-8d3f-7509b5ee136f",
    "log_name": "System",
    "level": "Information",
    "tenant": "496e3cfd-672c-47ae-9dfb-0d840b0aed80",
    "message": "User Log-off Notification for Customer Experience Improvement Program",
    "@timestamp": "2020-02-05T21:45:28.064Z",
    "event_id": 7002,
    "type": "wineventlog",
    "user": {
      "identifier": "S-1-5-18",
      "domain": "NT AUTHORITY",
      "name": "SYSTEM",
      "type": "User"
    },
    "result": "wineventlog-System-7002"
  },
  "fields": {
    "@timestamp": [
      "2020-02-05T21:45:28.064Z"
    ]
  },
  "sort": [
    1580939128064
  ]
}
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2020, 2:50pm UTC](https://discuss.elastic.co/t/all-fields-are-dropped-that-arent-date-fields/218614/2 "2020-03-09T14:50:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.