Disappered keyword type when create index-pattern in Kibana

Elastic Stack Kibana
1

Hello,

I have an such index:

 {
  "mapping": {
    "_default_": {
      "_all": {
        "enabled": false
      },
      "properties": {
        "name": {
          "type": "keyword"
        }
      }
    },
    "doc": {
      "_all": {
        "enabled": false
      },
      "properties": {
        "@timestamp": {
          "type": "date"
        },
        "action": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "application_id": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "area": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "cause": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "count": {
          "type": "float"
        },
        "id": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "max": {
          "type": "float"
        },
        "mean": {
          "type": "float"
        },
        "name": {
          "type": "keyword"
        },
        "sum": {
          "type": "float"
        },
        "type": {
          "type": "text",
          "fields": {
            "keyword": {
              "type": "keyword",
              "ignore_above": 256
            }
          }
        },
        "value": {
          "type": "float"
        }
      }
    }
  }
}

But when I create index pattern in Kibana I don't see "name.keyword" field, only just "name".

What It can be related with?

2

Hey, a couple questions.

Does the index have data in it? And where are we checking for name.keyword at? In some cases Kibana will collapse these into one (discover for example).

3
  1. Index have date in it.
  2. In:
  • Management -> Index patterns we have name (searchable, aggregatable)
  • Discover, Visualizations we can't see name.keyword too
4

The field list in discover is dependent on the the first 500 results, missing fields won't be added. It should show in visualize and the index pattern page though - it sounds like a bug. The mappings look okay. Can you share your exact Kibana version?

The only other thing I can think of is clicking the refresh icon on the index pattern page to update Kibana's cached version, but it sounds like we've tried that already.

5

Kibana Version: 6.4.2

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.