# Cant get fields to show up for Data Table visualization

**URL:** https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529
**Category:** Kibana
**Created:** [March 21, 2020, 6:39pm UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529 "2020-03-21T18:39:26Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![perfecto25](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/perfecto25/32/38070_2.png) [@perfecto25](https://discuss.elastic.co/u/perfecto25)
#### Post date: [March 21, 2020, 6:39pm UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529/1 "2020-03-21T18:39:26Z")

</div>

Hello, I have a custom index called "sysmon", I am sending a log to this index, from an iotop process that logs I/O count by process name,

the data is showing up in Discover, and I can see my custom fields w data (diskio, pid, data,etc)

 ![Selection_031](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fde39cf454712b0467960cdf1360fd3d822601fe.png)

These fields are extracted using this grok pattern,

```auto
root@vulcan:logstash $ cat conf.d/iotop.conf 
    input { 
      beats { port => 5044 }
    }

    filter {
    	grok {
            match => { "message" => "%{NUMBER:hour}:%{NUMBER:minute}:%{NUMBER:second} %{NUMBER:pid} (?<be>[a-z].[\/][0-9]+) %{WORD:user} %{SPACE} %{NUMBER:diskr} (?<diskrkb>[A-Z]..) %{SPACE} %{NUMBER:diskw} (?<diskwkb>[A-Z]..) %{SPACE} %{NUMBER:swapin} %{NOTSPACE} %{SPACE} %{NUMBER:io} %{NOTSPACE} %{GREEDYDATA:data}" }
          }
    }

    output {
      elasticsearch { 
    	hosts => ["vulcan:9200"] 
    	index => "sysmon"
      }
    }

```

I want to create a Data table to display processes that have the highest disk I/O, but cant get any of my fields to show up, only 2 fields are available on this index,

`@timestamp` and `log.offset`

 ![Selection_032](https://us1.discourse-cdn.com/elastic/original/3X/f/6/f62a53a2439393e8442ea1d53cd82f675627437b.png)

How do I get other fields to show up?

btw, if I look at Settings \> Index Patterns the custom fields are there,

 ![Selection_033](https://us1.discourse-cdn.com/elastic/original/3X/a/4/a4bf3a106c945030dc497ed6552875b42214c65b.png)

---

<div class="post-metadata">

### Author: ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)
#### Post date: [March 21, 2020, 9:22pm UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529/2 "2020-03-21T21:22:24Z")

</div>

From the screen shot, it looks like you selected `median` aggregation. That aggregation only accepts numbers so your text fields are filtered out of the list.

Select `Terms` aggregation to be able to aggregate on text fields.

---

<div class="post-metadata">

### Author: ![perfecto25](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/perfecto25/32/38070_2.png) [@perfecto25](https://discuss.elastic.co/u/perfecto25)
#### Post date: [March 22, 2020, 6:19am UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529/3 "2020-03-22T06:19:07Z")

</div>

that worked, thank you

 ![Selection_035](https://us1.discourse-cdn.com/elastic/original/3X/4/6/468045c3f0a320ff6f9a8092160a0cad3d20f5c0.png)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 19, 2020, 6:19am UTC](https://discuss.elastic.co/t/cant-get-fields-to-show-up-for-data-table-visualization/224529/4 "2020-04-19T06:19:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.