Hi everyone, I am stuck with an issue regarding fielddata aggregation. I spent many days looking for similar issues, but none of them worked. In a nutshell, I use ELK stack (version 7.3.1) for personal purpose and want to exploit Dashboard & SIEM utilities. My architecture is the following (all b…

[illegal_argument_exception] Fielddata is disabled on text fields by default. Set fielddata=true on [host.name]

system (system) Closed July 1, 2020, 3:49pm 2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Visualize: Fielddata is disabled on text fields by default. Set fielddata=true on [system.syslog.hostname] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory Elasticsearch	3	1933	June 1, 2017
Set fielddata=true on [event.dataset] Kibana	2	2524	August 1, 2020
How can I run analytics on elasticsearch using aggregations without getting the fielddata error? Elasticsearch	1	868	June 27, 2017
Not able to search the data in index Elasticsearch	5	1431	November 4, 2022
Elasticsearch Elasticsearch	2	11563	September 16, 2020