# No fields available when creating logs threshold alert in Kibana

**URL:** <https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [January 5, 2023, 9:21am UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525 "2023-01-05T09:21:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mattia.borini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mattia.borini/32/98686_2.png) [@mattia.borini](https://discuss.elastic.co/u/mattia.borini)\
**Post date:** [January 5, 2023, 9:21am UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525/1 "2023-01-05T09:21:02Z")

</div>

Hi, I don't understand why I cannot find any field in the select when trying to create a Log Threshold Alert in Kibana (7.17).

 ![kibana-no-fields](https://us1.discourse-cdn.com/elastic/original/3X/c/4/c4d1c2e28959a50f062e4eded2b6298d0b2fb521.jpeg)  
I can see data in Discover  
 ![discover](https://us1.discourse-cdn.com/elastic/original/3X/4/9/491f1702a5d5770b9e6e9d529ddd5d2bae5fccc9.jpeg)

---

<div class="post-metadata">

**Author:** ![Ayush\_Mathur](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ayush_mathur/32/77134_2.png) [@Ayush\_Mathur](https://discuss.elastic.co/u/Ayush_Mathur)\
**Post date:** [January 5, 2023, 3:40pm UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525/2 "2023-01-05T15:40:38Z")

</div>

@mattia.borini this is due to the fact that your index contains only single field called "log" which essentially has the whole message as string text. You need to parse the events as JSON first to have the {property:value } pairing. Once those pairings are stored in ES, you will see the property list in your available fields list and can be used for alerting or monitoring purposes.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 2, 2023, 3:41pm UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525/3 "2023-02-02T15:41:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
