I am using logstash-5.2.1 with the elasticsearch output to populate my index.
Kibana-5.2.1 not recognizing integer fields. I am creating a filter in logstash like "%{NUMBER:count:int}" , but Kibana not able to recognize this field. But when I am changing filter type "%{WORD:count}", then it is. Please help me on this. How Integer are float type value can be shown in kibana.
hi @SHASHVER,
can you explain a little more what you mean when you say kibana is not recognizing the fields?
Do they not show up in Discover?
What exactly does your filter look like in Kibana?
Can you add one or more screenshots of Kibana that illustrate the issue?
thx,
Hi @thomasneirynck,
Yes, they not show up in discover. When in logstash.conf file I am giving filter like:
grok{
match => {"message" => "%{GREEDYDATA:MessagePart}=%{NUMBER:durationNumber:float}"}
}
Input log some thing like : 2017-03-03T06:46:39.855Z - info: externalSystem=CIA externalCall=login_Call email=testAdmin@test.com durationMs=110
Then in Kibana I am bale to see only filed MessagePart and not durationNumber.
An when I am changing filter :
grok{
match => {"message" => "%{GREEDYDATA:MessagePart}=%{WORD:durationNumber}"}
}
As you can see when field type change from NUMBER to WORD kibana showing in , but when type is NUMBER (INT), it not showing.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.