# Field missing when select Top Hit on Y-axis for bar chart

**URL:** <https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442>\
**Category:** Kibana\
**Created:** [September 1, 2022, 12:08pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442 "2022-09-01T12:08:01Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![siwapong.cha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siwapong.cha/32/110333_2.png) [@siwapong.cha](https://discuss.elastic.co/u/siwapong.cha)\
**Post date:** [September 1, 2022, 12:08pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442/1 "2022-09-01T12:08:01Z")

</div>

Hi all,

I'm trying to use Top Hit on my bar chart but many fields are missing from the field selection.

Below are my custom field which came from filebeat (ansible.xxxxxx)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/d/ed1981ed34b781c5a902d3b63d942d5b5723ed95.png)

Here when I selected Top Hit, all my ansible field missing.

![image](https://us1.discourse-cdn.com/elastic/original/3X/8/e/8e3e6b02f69d3bfb227289e3dcb71ccf6450c9ec.png)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/2/724e25812af925f87f0170f704dc3b31458b4b08.png)

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [September 1, 2022, 1:18pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442/2 "2022-09-01T13:18:50Z")

</div>

How is `ansible` and child properties defined in the mappings?

---

<div class="post-metadata">

**Author:** ![siwapong.cha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/siwapong.cha/32/110333_2.png) [@siwapong.cha](https://discuss.elastic.co/u/siwapong.cha)\
**Post date:** [September 1, 2022, 2:14pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442/3 "2022-09-01T14:14:10Z")

</div>

ansible.xxxx fields came from the field "message" and I used filebeat processor dissect to separate "message" into each ansible field

For example below

```auto
processors:
  - dissect:
      tokenizer: "%{ansible.xxx},%{ansible.xxx}"
      field: "message"
      target_prefix: ""

```

Not sure this answer on what you asked.

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [September 8, 2022, 2:22pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442/4 "2022-09-08T14:22:44Z")

</div>

No, I meant the mapping definition of your index in Elasticsearch: [Get mapping API | Elasticsearch Guide [8.4] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-get-mapping.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2022, 2:23pm UTC](https://discuss.elastic.co/t/field-missing-when-select-top-hit-on-y-axis-for-bar-chart/313442/5 "2022-10-06T14:23:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.