Cannot refresh mapping and get Unkown fields from Cowrie in kibana

[Joechip]

Hi,

I'm quite new with ELK and I was trying to get some nice graphs with cowrie honeypots input. but I only have unkown fileds.

I tried to refresh pattern but it doesn't seem to work.

What am I doing wrong ?
I'm sure it's verry basic but I can't seem to figure it out.

Thanks a lot.

[chrisronline (Chris Roberson)]

Hi Joechip,

Is it possible to share part of the data set, as well as the mappings for the index pattern?

For the latter, you can find that by clicking Dev Tools in the left navigation and executing this query:

GET filebeat-*/_mapping

Thanks