Difference between log and dashboard

[Arethusa]

Hello, I'm on Kibana v7.12.0

I have a fied "CommanLine" and in THIS log is very long.

And when i want to add it on Dashboard, I have (Missing Value) but only for this field, the other are ok.

I supose it's because the value is to long, but maybe not !

Do you have an idea ?

Thank you.

[flash1293 (Joe Reuter)]

Check the mapping of your index - I suspect you are using a keyword field with an ignore_above param set to a low value. Visualizations will use aggregations which are based on the indexed value - in this case there is no indexed value because it got ignored.

You can fix it by increasing the ignore_above setting in your mapping - for historical data you have to re-index existing data so it's picked up correctly.

[Arethusa]

Hello,

...
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256
...

Yes, I have "ignore_above" : 256, I will study how to fixe that juste for this field.

Thank you