# Kibana refresh field list not working **URL:** \ **Category:** Kibana\ **Created:** [June 19, 2019, 3:33pm UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-working/186513 "2019-06-19T15:33:19Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Ahana\_Ambshri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahana_ambshri/32/45618_2.png) [@Ahana\_Ambshri](https://discuss.elastic.co/u/Ahana_Ambshri)\ **Post date:** [June 19, 2019, 3:33pm UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-working/186513/1 "2019-06-19T15:33:20Z")
Hey, I am sending heartbeat and metricbeat logs from host A to Security Onion's logstash. I can see little triangles next to multiple fields. I have refreshed the indexes multiple times (management -\> index pattern -\> _:logstash-beats-_-\> refresh), but it's not working. What am I missing? I am new to all ELK. Index Name: _:logstash-beats-_ ELK Version: 6.7.2 Metricbeat & heartbeat version: 6.7.1 The reason it's not updated because I am using the latest Security onion ISO. Kibana Log: ``` {"type":"response","@timestamp":"2019-06-19T15:26:18Z","tags":[],"pid":1,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"host":"127.0.0.1:5601","origin":"https://10.80.2.220","kbn-version":"6.7.2","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36","content-type":"application/json","accept":"*/*","referer":"https://10.80.2.220/app/kibana","accept-encoding":"gzip, deflate, br","accept-language":"en-US,en;q=0.9","x-forwarded-for":"10.90.17.63","x-forwarded-host":"10.80.2.220","x-forwarded-server":"localhost","connection":"Keep-Alive","content-length":"54"},"remoteAddress":"172.17.0.1","userAgent":"172.17.0.1","referer":"https://10.80.2.220/app/kibana"},"res":{"statusCode":200,"responseTime":9,"contentLength":9},"message":"POST /api/saved_objects/_bulk_get 200 9ms - 9.0B"} {"type":"response","@timestamp":"2019-06-19T15:26:19Z","tags":[],"pid":1,"method":"get","statusCode":200,"req":{"url":"/api/index_patterns/_fields_for_wildcard?pattern=*%3Alogstash-beats-*&meta_fields=_source&meta_fields=_id&meta_fields=_type&meta_fields=_index&meta_fields=_score","method":"get","headers":{"host":"127.0.0.1:5601","accept":"application/json, text/plain, */*","kbn-version":"6.7.2","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36","referer":"https://10.80.2.220/app/kibana","accept-encoding":"gzip, deflate, br","accept-language":"en-US,en;q=0.9","x-forwarded-for":"10.90.17.63","x-forwarded-host":"10.80.2.220","x-forwarded-server":"localhost","connection":"Keep-Alive"},"remoteAddress":"172.17.0.1","userAgent":"172.17.0.1","referer":"https://10.80.2.220/app/kibana"},"res":{"statusCode":200,"responseTime":73,"contentLength":9},"message":"GET /api/index_patterns/_fields_for_wildcard?pattern=*%3Alogstash-beats-*&meta_fields=_source&meta_fields=_id&meta_fields=_type&meta_fields=_index&meta_fields=_score 200 73ms - 9.0B"} {"type":"response","@timestamp":"2019-06-19T15:26:19Z","tags":[],"pid":1,"method":"put","statusCode":200,"req":{"url":"/api/saved_objects/index-pattern/AWBLHZaBRuBloj96jvrD","method":"put","headers":{"host":"127.0.0.1:5601","origin":"https://10.80.2.220","kbn-version":"6.7.2","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36","content-type":"application/json","accept":"*/*","referer":"https://10.80.2.220/app/kibana","accept-encoding":"gzip, deflate, br","accept-language":"en-US,en;q=0.9","x-forwarded-for":"10.90.17.63","x-forwarded-host":"10.90.1.115","x-forwarded-server":"localhost","connection":"Keep-Alive","content-length":"181938"},"remoteAddress":"172.17.0.1","userAgent":"172.17.0.1","referer":"https://10.80.2.220/app/kibana"},"res":{"statusCode":200,"responseTime":375,"contentLength":9},"message":"PUT /api/saved_objects/index-pattern/AWBLHZaBRuBloj96jvrD 200 375ms - 9.0B"} ``` Logstash log: ``` [2019-06-19T14:56:25,409][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:56:46,149][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:56:50,703][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:56:55,628][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:57:00,040][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:57:03,635][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] [2019-06-19T14:57:09,424][INFO][org.elasticsearch.cluster.metadata.MetaDataIndexTemplateService] adding template [kibana_index_template:.kibana] for index patterns [.kibana] ``` I do not see any errors and I have not made any changes to default indexs. It was added automatically once Elasticsearch started recieveing logs from Beats. Thanks in advance. ---
**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\ **Post date:** [June 19, 2019, 9:04pm UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-working/186513/2 "2019-06-19T21:04:14Z")
What's the message you get when hovering over the triangles? ---
**Author:** ![Ahana\_Ambshri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahana_ambshri/32/45618_2.png) [@Ahana\_Ambshri](https://discuss.elastic.co/u/Ahana_Ambshri)\ **Post date:** [June 20, 2019, 3:26pm UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-working/186513/3 "2019-06-20T15:26:52Z")
![13%20AM](https://us1.discourse-cdn.com/elastic/original/3X/3/d/3d957bdb7a9e196b39eaa306f82792efa9f035e0.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 18, 2019, 3:29pm UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-working/186513/4 "2019-07-18T15:29:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.