Disappered keyword type when create index-pattern in Kibana


(Andrey Sukhoa) #1

Hello,

I have an such index:

 {
  "mapping": {
    "_default_": {
      "_all": {
        "enabled": false
      },
      "properties": {
        "name": {
          "type": "keyword"
        }
      }
    },
    "doc": {
      "_all": {
        "enabled": false
      },
      "properties": {
        "@timestamp": {
          "type": "date"
        },
        "action": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "application_id": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "area": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "cause": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "count": {
          "type": "float"
        },
        "id": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "max": {
          "type": "float"
        },
        "mean": {
          "type": "float"
        },
        "name": {
          "type": "keyword"
        },
        "sum": {
          "type": "float"
        },
        "type": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "value": {
          "type": "float"
        }
      }
    }
  }
}

But when I create index pattern in Kibana I don't see "name.keyword" field, only just "name".

What It can be related with?


(Jon Budzenski) #2

Hey, a couple questions.

Does the index have data in it? And where are we checking for name.keyword at? In some cases Kibana will collapse these into one (discover for example).


(Andrey Sukhoa) #3
  1. Index have date in it.
  2. In:
  • Management -> Index patterns we have name (searchable, aggregatable)
  • Discover, Visualizations we can't see name.keyword too

(Jon Budzenski) #4

The field list in discover is dependent on the the first 500 results, missing fields won't be added. It should show in visualize and the index pattern page though - it sounds like a bug. The mappings look okay. Can you share your exact Kibana version?

The only other thing I can think of is clicking the refresh icon on the index pattern page to update Kibana's cached version, but it sounds like we've tried that already.


(Andrey Sukhoa) #5

Kibana Version: 6.4.2


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.