Kibana always showing unrelated fields

Elastic Stack Kibana
1

I am using Elastic Cloud Kibana and I am always seeing fields that are of date type, but have nothing to do with the indexed document. It is a metricbeat index and I am using the default mapping provided by metricbeat.

Any ideas? Is there any config in Kibana to disable this from the view, or am I missing something?

Versions:

  • Kibana: 7.8
  • Metricbeat: 7.7.1

Example:

image
image1312×1550 161 KB

2

Hi @luminance, I'm guessing that you are seeing all of the fields in the metricbeat mapping, even ones which might be empty -- but out of curiosity, where in Kibana 7.8 did this screengrab come from? Are you looking at the individual document view in Discover?

3

Hey @lukeelmers , both of the views have this, the Discover and the individual document view.

4

Hi, all of these fields were added by the index template that Metricbeat loaded.

You can customize the fields.yml file describes the fields, and remove any that don't apply to your usage. See https://www.elastic.co/guide/en/beats/metricbeat/current/configuration-template.html

5

HI @tsullivan, that is not the case. There are ~1000 fields defined in the metricbeat mapping template and that is ok. But only the data type fields are showed on every view.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.