# Logstash and metrcibeat fields are different **URL:** \ **Category:** Logstash\ **Created:** [May 30, 2018, 6:56am UTC](https://discuss.elastic.co/t/logstash-and-metrcibeat-fields-are-different/133802 "2018-05-30T06:56:17Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Post date:** [May 30, 2018, 6:56am UTC](https://discuss.elastic.co/t/logstash-and-metrcibeat-fields-are-different/133802/1 "2018-05-30T06:56:17Z")
Hi, I have 2 fields in my data, one created from LS grok filter and one crated by metribeat. From LS grok filter: beat.hostname index is : myindex-\* From metricbeat : beat.hostname index is : metricbeat-\* Now my challenge is to use this field in one visualization where system matrxi will be shown from both input sources. So that I can group by beat.hostname. However there is difference. field created by LS has .keyword (agreeable and searchable) and the field created by metricbeat does not have .keyword. its only beat.hostname. Since I an select only one field from the term dropdown on time series/guage visual builder, I cant aggregate results from both input sources in one visualization. How to make those fields compatible so that when I select beat.hostname, it will show me all hosts coming via LS as well as via metricbeat. br, Sunil. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 27, 2018, 6:56am UTC](https://discuss.elastic.co/t/logstash-and-metrcibeat-fields-are-different/133802/2 "2018-06-27T06:56:18Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.