I am trying to create error dashboard for which firstly I have to create a visualization out of my Index pattern. I am not able to see all the elements of my xml when I am trying to filter out to create the visualization. Not sure why all fields are not visible/available. Kindly help me here and let me know if you require more information from my end.
I am able to extract the below xml when written the grok code and out of this xml I wanted to create a dashboard which is a stopper now.
I think this is really an "it depends" answer. When creating visualizations, not every field will show in all field-selection dropdowns. It depends on a number of factos.
What is the visualization you are trying to build? What exactly is the configuration you are trying to set?
What is the _mapping of your index? Depending on the field-type, certain functionality will be available or not (e.g. analyzed fields cannot be used to aggregate). The XML-snippet is likely not all that relevant. What is relevant is how you actually ingested that document (so (2)).
I am trying to create a error graph based on the fields of my xml . Similar index I created for other xml with same fields I can see in visualize , but I am not able to see in my particular index pattern. Not sure when same grok pattern is written and similar xml is extracted out , only 1 index shows me all fields whereas other doesn't.
With grok pattern I shared earlier, I am able to see the index created under index pattern and index management on kibana. The problem is , under kibana--> saved objects -> [mm-eai-logisticprocesses] I don't see the required fields for only this index [mm-eai-logisticprocesses]. For another index( see below snippet) which has same data , I get all the required error fields. My requirement is to fetch below xml and all the fields in the xml.
this seems more of an ingest issue. You might want to double check if your data is indexed correctly first, before troubleshooting in Kibana. Verify the Elasticsearch-mapping of your index and check if all desired fields are in there (https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html). (myindex/_mapping) The compare that to an actual document in your index (myindex/_search). I'd expect something is missing there.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.