Analyzed fields not having .raw in Kibana for visualization


(Noémie) #1

Hello,

I'm trying to visualize data stored in ip fields, string fields or any type of fields created when I process my log lines in Logstash. The thing is that I don't have any .raw field in kibana (I'm using Kibana 4.0.3 and Logstash 2.1.0). Using a older version of kibana and logstash, I already used the .raw fields but it seems that I don't have them since I'm using the versions mentionned above. Can anyone help me with that?

Thank you for your answers,
Noémie


(Noémie) #2

Hello,

I have found a solution. Actually, I was on an index with no mapping set for it. By posting the right mapping on the Elasticsearch node for this index and specifying that some fields would not be indexed, it solved the problem.


(system) #3