I am running the latest versions of Kibana, Logstash and Elasticsearch. I am unsure how to make my logMessage field aggregatable. I have searched on the forums for a solid answer but can't seem to find a definitive one. Here is my mappings. [image] "mappings": { "prnformat": { "properties":{…

You should be able to add a field to the existing mapping: documentation PUT prn-/_mapping/prnformat { "properties": { "logMessage": { "type": "text", "fields": { "raw": { "type": "keyword" } } } } } Then you should be able to aggregate on…

Discuss the Elastic Stack

How to make a field aggregatable in Kibana

Elastic Stack Kibana

CDR (Colton) June 22, 2017, 6:11pm 9

I changed it in my json template and rebooted the system and it still comes up as a text type.

Topic		Replies	Views
Can't make text field aggregatable Kibana	4	1371	January 31, 2022
How to make a field aggregable in Kibana Kibana	5	444	July 14, 2018
Unable to make a field aggregatable in kibana Elasticsearch	27	10447	January 25, 2019
Unable to make a field aggregatable in kibana/ES Kibana	3	1494	February 8, 2019
How to make a text field aggregate-able in Kibana Kibana	5	825	September 6, 2023

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to make a field aggregatable in Kibana

Related topics