Fields not showing in Visualization graphs

Elastic Stack Kibana
1

Hello,

When building a new visualization graph, I cannot see the fields in the tab:

image

But in fact, all of the fields I am ingesting are being shown in the logs:

image
image.png1491×162 35.8 KB

{
"runscope" : {
"aliases" : { },
"mappings" : {
"properties" : {
"@timestamp" : {
"type" : "date"
},
"@version" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"code_status" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"dial_ms" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}

Can I make them usable in my graphs?

2

Hi @Tania_Saez,

I might be jumping to conclusions based on your screengrab, but I wonder if perhaps the issue is that most of your fields are mapped as type: text?

The available fields for a visualization will be narrowed based on the type of aggregation you select. By choosing "max", for example, you will only see fields that are date or number. Based on your mapping, it looks like the only field matching that criteria is @timestamp, so it makes sense that it would be the only result in the dropdown. I'm guessing that if you changed your aggregation to something like "top hit" you would see more fields.

I'd recommend updating your mappings, and then seeing if that gives you the results you are looking for. If not, feel free to reply and I'm happy to try troubleshooting further!

Luke

3

Hello Luke,

I am trying to update the type for my fields, but with errors:

PUT runscope/_mapping
{
"properties": {
"total_response_time": {
"type": "float"
}
}
}

This is the response I get:
{
"error": {
"root_cause": [
{
"type": "illegal_argument_exception",
"reason": "mapper [total_response_time] of different type, current_type [text], merged_type [float]"
}
],
"type": "illegal_argument_exception",
"reason": "mapper [total_response_time] of different type, current_type [text], merged_type [float]"
},
"status": 400
}

How can I update my types field?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.