"keyword" field shows up as "analyzed" in Kibana

Elastic Stack Beats
1

Hi,

I'm using Elasticsearch stack 5.x and using the metricbeat and hsbeat.
They both have similar mapping templates and for the common fields like beat,name & beat.hostname the mapping is exactly the same.

I have successfully put both settings to kibana.
However from the "management" tab in kibana, The common fields (beat.name & beat.hostname & tag ) is shown as analyzed for my hsbeat index and "aggregatable" (not analyzed) for metricbeat.

Would you please kindly help me with this?
What should I check?

Thanks,
Parisa.

2

Hi again,

I deleted my Index Pattern and recreated with the same name again and it started working!

Thanks,
Parisa.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.