Field value does not come up when creating a filter with exists clause

Hi Everyone,

I am new to Kibana and i have encountered a problem that i do not know how to resolve.

I have a text field (named fault_payload) that is generated by Greedydata in a logstash pipeline. This field produces a value as follows in some cases.

I can see this value in discoverer but when i try and create a visualization where i apply fault_payload exists this value does not come up (other values in this field do but the below does not):

Problem payload:

                                                                        [ActionType:Invoke]: Fault: <soap-env:Fault xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/"><faultcode xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">soap:Server</faultcode><faultstring>ICS runtime execution error</faultstring><detail><ICSfaultVar/><reason>DBWriteInteractionSpec Execute Failed Exception. insert failed. Descriptor name: [InsertOrder.CochOrders]. Caused by java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated . Please see the logs for the full DBAdapter logging output prior to this exception. This exception is considered not retriable, likely due to a modelling mistake. To classify it as retriable instead add property nonRetriableErrorCodes with value "-1" to your deployment descriptor (i.e. weblogic-ra.xml). ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated Fault Details : &lt;err:serviceInvocationError xmlns:err="http://xmlns.oracle.com/cloud/generic/service/fault"&gt; &lt;err:type&gt;DBWriteInteractionSpec Execute Failed Exception&lt;/err:type&gt; &lt;err:title&gt;insert failed. Descriptor name: [InsertOrder.CochOrders].&lt;/err:title&gt; &lt;err:detail&gt;Caused by java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (OICUSER.SYS_C0018307) violated .&lt;/err:detail&gt; &lt;err:errorCode&gt;serviceInvocationError&lt;/err:errorCode&gt; &lt;err:remedialAction&gt;Please see the logs for the full DBAdapter logging output prior to this exception.&lt;/err:remedialAction&gt; &lt;/err:serviceInvocationError&gt; :</reason><operation>insert</operation><request_payload/></detail></soap-env:Fault>]]

Note, the above payload includes some new lines which i have removed in order to show it all under the code element here (not sure how to keep original structure :frowning: ).

Any help or pointers will be appreciated

Kind Regards,
Stan

Can you please check what is the mapping for your fields?

https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html

Thanks,
Bhavya