Hi this issue is related to mapping
You can see mapping for your index in this way:
GET _mapping/index_name
There are fields keyword type:
"some_field": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}
So basically keyword is used for visualization. And if length is grater than 256 symbols you can't see it because it's not indexed.
So you just need to change this value. For this you can add additional template.
PUT /_template/stat_1
{
"index_patterns":"stats-*",
"order":1,
"mappings":{
"stat":{
"properties":{
"long_string_field":{
"type":"text",
"fields":{
"keyword":{
"type":"keyword",
"ignore_above":512000
}
}
}
}
}
}
}