Field Counts

Elastic Stack Kibana
1

Hey All,

Looking to get a list of all of our current (or top 100) field names, and their counts in documents, is there a way to do this in Kibana or calling ES directly?

Problem we are looking to solve:

We are logging from multiple applications and the same logstash index. Dev teams have been using different field names for their applications, and sometimes different casing, (Application, application). We are looking to sort out our field mapping.

Any help would be fantastic.

2

You'd have to get the top 100 field values, as fields with no value should (ideally) be null and not count, and then figure it from there.