Could not locate that index-pattern-field (id: flow.locality)

I'm starting to use the Filebeat netflow module. I've imported the filebeat 7.6.1 template and dashboards, but one of the visualizations generates this error:

Could not locate that index-pattern-field (id: flow.locality)

The data certainly contains that field, but I don't see that field in the index template. Should I file a bug or is something else going on? Thanks.

Hi @opoplawski!

Could you try to refresh the index template (from Kibana) to see if this changes things?
However I don't see this field in the mappings:

I think you should open a bug issue for this.

Thank you!

Refresh doesn't help. I've filed



It seems to me that this field is supposed to be part of the ECS fields ( but I was not able to find it in the ECS list.

However let's track this in the GH issue to see why the visualisation is not loaded.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.