Indexing new fields

(Jon A) #1

Hi all,
apologies if this has already been covered.

I've just gone through the process of getting a grok match written for a syslog entry which comes from a firewall.
I've got the relevant information being seen as fields on the left, but they are showing a question mark next to them.
Is it a case of waiting for them to be indexed or do I need to do anything?


(Magnus B├Ąck) #2

Sounds like you want to refresh the field list via the settings page in Kibana.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.