# Links status based on sysloghost and message

**URL:** <https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544>\
**Category:** Kibana\
**Created:** [January 18, 2020, 5:19am UTC](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544 "2020-01-18T05:19:52Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![azasypkin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/azasypkin/32/42216_2.png) [@azasypkin](https://discuss.elastic.co/u/azasypkin)\
**Post date:** [January 23, 2020, 8:30am UTC](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544/10 "2020-01-23T08:30:43Z")

</div>

> [@mushfiq](#):
>
> Deleted old index and created new one but still "message is not aggregatable.

So you updated `message_field`, and should have `message_field.keyword`. Don't you see it in Kibana? If not, try to refresh index pattern mapping cache like described [here](https://discuss.elastic.co/t/kibana-doesnt-recognize-keyword-fields/194586/2)

Best,  
Oleg

---

_[View the full topic](https://discuss.elastic.co/t/links-status-based-on-sysloghost-and-message/215544)._