Filtering search on properties

Elastic Stack Kibana
1

I am trying to build a dashboard on an existing elasticsearch cluster index and having trouble getting the visualizations to work. I am able to query the specific fields in discover tab but when trying to aggregate by terms on a pie chart for example, I do not see the fields I want.

Firstly, this is a view of kibana that shows for the specific index that contains the data, the available fields:

 Available Fields
@timestamp
 _id
 _type
 etc.

Customer ID is not one of them. Now there are different data sources coming to the same index for example :

job records
customer records
project records
etc.

This is defined by _type field. Now I want to access the customer record object and it has its own properties:

customer_index": {
    "dynamic_templates": [
       {
          "string_fields": {
             "mapping": {
                "index": "analyzed",
                "omit_norms": true,
                "type": "multi_field",
                "fields": {
                   "{name}": {
                      "index": "analyzed",
                      "omit_norms": true,
                      "type": "string"
                   },
                   "raw": {
                      "ignore_above": 256,
                      "index": "not_analyzed",
                      "type": "string"
                   }
                }
             },
             "match": "*",
             "match_mapping_type": "string"
          }
       },
       {
          "message_field": {
             "mapping": {
                "index": "analyzed",
                "omit_norms": true,
                "type": "string"
             },
             "match": "message",
             "match_mapping_type": "string"
          }
       }
    ],
    "_all": {
       "enabled": true,
       "omit_norms": true
    },
    "properties": {
       "@timestamp": {
          "type": "date",
          "format": "dateOptionalTime"
       },
       "@version": {
          "type": "string",
          "index": "not_analyzed"
       },
       "CCType": {
          "type": "string",
          "norms": {
             "enabled": false
          },
          "fields": {
             "raw": {
                "type": "string",
                "index": "not_analyzed",
                "ignore_above": 256
             }
          }
       },
       "Crawled": {
          "type": "string",
          "norms": {
             "enabled": false
          },
          "fields": {
             "raw": {
                "type": "string",
                "index": "not_analyzed",
                "ignore_above": 256
             }
          }
       },
       "customerid": {
          "type": "string",
          "norms": {
             "enabled": false
          },
          "fields": {
             "raw": {
                "type": "string",
                "index": "not_analyzed",
                "ignore_above": 256
             }
          }
       },

Now I would like to search for these property fields: customerid, crawled, cctype. I tried saving the search which was based on filtering the field and then using that to visualize but not getting the pie chart to work again. I see the fields in the available fields list but not when I try and add the visualization.

2

Are you selecting the same index you see in Discover when building your visualization?

3

Yes, thanks for your response. I was able to get it to work. The default configuration was ignoring the fields and I was told how to change that.