Missing Feilds in Kibana Term Aggregation

Elastic Stack Kibana
1

Hey all,

I am VERY new to ELK, and I am having an issue.

I am moving logs into Elasticsearch via Logstash and Grok. This breaks my logfiles up, how ever when I want to use the Kibana Vizualization (pie chart) and need to select the Term I am looking for, none of the Logstash filtered terms are appearing. Any help would be apprecated.

Kevin

2

Is the missing field getting put into the document that is stored in logstash? Add the following to your logstash configuration file

  stdout { codec => json }
}```

This will show you what is getting stored in elasticsearch. Make sure your field is in here.

Nathan