Field value does not come up when creating a filter with exists clause

[stantanev (Stanislav Tanev)]

Hi Everyone,

I am new to Kibana and i have encountered a problem that i do not know how to resolve.

I have a text field (named fault_payload) that is generated by Greedydata in a logstash pipeline. This field produces a value as follows in some cases.

I can see this value in discoverer but when i try and create a visualization where i apply fault_payload exists this value does not come up (other values in this field do but the below does not):

Problem payload:

                                                                        [ActionType:Invoke]: Fault: <soap-env:Fault xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/"><faultcode xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">soap:Server</faultcode><faultstring>ICS runtime execution error</faultstring><detail><ICSfaultVar/><reason>DBWriteInteractionSpec Execute Failed Exception. insert failed. Descriptor name: [InsertOrder.CochOrders]. Caused by java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated . Please see the logs for the full DBAdapter logging output prior to this exception. This exception is considered not retriable, likely due to a modelling mistake. To classify it as retriable instead add property nonRetriableErrorCodes with value "-1" to your deployment descriptor (i.e. weblogic-ra.xml). ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated Fault Details : &lt;err:serviceInvocationError xmlns:err="http://xmlns.oracle.com/cloud/generic/service/fault"&gt; &lt;err:type&gt;DBWriteInteractionSpec Execute Failed Exception&lt;/err:type&gt; &lt;err:title&gt;insert failed. Descriptor name: [InsertOrder.CochOrders].&lt;/err:title&gt; &lt;err:detail&gt;Caused by java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated .&lt;/err:detail&gt; &lt;err:errorCode&gt;serviceInvocationError&lt;/err:errorCode&gt; &lt;err:remedialAction&gt;Please see the logs for the full DBAdapter logging output prior to this exception.&lt;/err:remedialAction&gt; &lt;/err:serviceInvocationError&gt; :</reason><operation>insert</operation><request_payload/></detail></soap-env:Fault>]]

Note, the above payload includes some new lines which i have removed in order to show it all under the code element here (not sure how to keep original structure ).

Any help or pointers will be appreciated

Kind Regards,
Stan

[bhavyarm]

Can you please check what is the mapping for your fields?

https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html

Thanks,
Bhavya