# Elastic 里面有数据，但是无法拆解

**URL:** <https://discuss.elastic.co/t/elastic/170837>\
**Category:** 中文提问与讨论\
**Created:** [March 5, 2019, 8:01am UTC](https://discuss.elastic.co/t/elastic/170837 "2019-03-05T08:01:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![mytea003](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mytea003/32/41797_2.png) [@mytea003](https://discuss.elastic.co/u/mytea003)\
**Post date:** [March 5, 2019, 8:01am UTC](https://discuss.elastic.co/t/elastic/170837/1 "2019-03-05T08:01:40Z")

</div>

![%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20190305155948](https://us1.discourse-cdn.com/elastic/original/3X/1/b/1b867ef013160c71926fbac5e6c1a1d271fc4e74.png)

如图所示，数据已经在Elastic里面了。但是无法拆解出来按照规定的字段进行查看相应的信息。 这个如何处理呀？ 怎么把原来不能拆解出来的记录，重新匹配拆解呢？

---

<div class="post-metadata">

**Author:** ![ombres](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ombres/32/29517_2.png) [@ombres](https://discuss.elastic.co/u/ombres)\
**Post date:** [March 5, 2019, 9:07am UTC](https://discuss.elastic.co/t/elastic/170837/2 "2019-03-05T09:07:39Z")

</div>

discover这个页面吧，左侧不是有一些字段吗？鼠标移过去点add就可以了。

---

<div class="post-metadata">

**Author:** ![mytea003](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mytea003/32/41797_2.png) [@mytea003](https://discuss.elastic.co/u/mytea003)\
**Post date:** [March 5, 2019, 9:51am UTC](https://discuss.elastic.co/t/elastic/170837/3 "2019-03-05T09:51:16Z")

</div>

> [@ombres](#):
>
> 左侧不是有一些字段吗？鼠标移过去点add就可以

就是识别不出来。才需要重新匹配。

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 2, 2019, 9:51am UTC](https://discuss.elastic.co/t/elastic/170837/4 "2019-04-02T09:51:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
