# Kibana dashboard not showing 'message' field

**URL:** <https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127>\
**Category:** Kibana\
**Tags:** lens\
**Created:** [November 30, 2020, 8:42pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127 "2020-11-30T20:42:34Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![renansph](https://avatars.discourse-cdn.com/v4/letter/r/58956e/32.png) [@renansph](https://discuss.elastic.co/u/renansph)\
**Post date:** [November 30, 2020, 8:42pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/1 "2020-11-30T20:42:34Z")

</div>

Hi.  
I'm trying to add the 'message' field to a 'Data Table' in Kibana but i can't see the field.

In the built-in dashboard from Postgresql filebeat i can see the field without problem:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e0dca059aed1fc79c493d7e5f9b399db2fa6e9f8.png)

But when i try to build a new dashboard, in Lens, using the same Index, the field is not listed:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/c/8c0ce0460df5c20f67b9bfba2527e1a5d390a145.png)

I even tried searching, but no results.

Am i doing something wrong?

Thanks.

---

<div class="post-metadata">

**Author:** ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)\
**Post date:** [November 30, 2020, 8:59pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/2 "2020-11-30T20:59:08Z")

</div>

`message` is a full text field, so it can't be aggregated. The existing visualizations that you see are doing one of two things:

1. Using a saved search from Discover, to see a data table exactly like what you see in Discover
2. Using the "Top hits" metric in Visualize, which is able to read from `_source` for only a few documents. This is most often used to show the "most recent" value of a full text field.

---

<div class="post-metadata">

**Author:** ![renansph](https://avatars.discourse-cdn.com/v4/letter/r/58956e/32.png) [@renansph](https://discuss.elastic.co/u/renansph)\
**Post date:** [November 30, 2020, 9:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/3 "2020-11-30T21:32:52Z")

</div>

Thanks @wylie  
Now i could do what i wanted using the "Discover":

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/5/2521fb0a49a38587e2fc8b7f43eed5e9218dc6df.png)

Just another question:  
In "Discover" can i show only the distinct values from 'message' and add another column with the 'unique count' of those values? This is what i was trying to achive using the dashboard.  
Thanks.

---

<div class="post-metadata">

**Author:** ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)\
**Post date:** [November 30, 2020, 9:48pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/4 "2020-11-30T21:48:03Z")

</div>

That would be possible if you could aggregate the message, but aggregations on full text fields are disabled by default with strong warnings against enabling it. Usually we would recommend extracting any meaningful values into a separate field that is aggregated. It is also possible to create a multi-mapped field for use with aggregation, and that might also suit your use case. More information in the docs: [https://www.elastic.co/guide/en/elasticsearch/reference/current/text.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/text.html)

---

<div class="post-metadata">

**Author:** ![renansph](https://avatars.discourse-cdn.com/v4/letter/r/58956e/32.png) [@renansph](https://discuss.elastic.co/u/renansph)\
**Post date:** [November 30, 2020, 11:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/5 "2020-11-30T23:07:00Z")

</div>

Ok thanks for your help!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 28, 2020, 11:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-message-field/257127/6 "2020-12-28T23:07:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
