Numeric fields not searchable and aggregatable

Elastic Stack Kibana
1

hey guys,
Two numeric fields that were working fine till yesterday suddenly started causing issues with visualizations with "field" errors.
I checked and found that the fields were listed as not searchable and aggregatable in the index.
However on performing a query on the index for _field_caps. I got the below output where they're listed as true for searchable and aggregatable.

Any ideas what could be causing this?

  "VMs_per_Core":{  
     "float":{  
        "type":"float",
        "searchable":true,
        "aggregatable":true,
        "indices":[  
           "its-vmw-vhost-2018.05",
           "its-vmw-vhost-2018.06"
        ]
     },

  "vCPUs_per_Core":{  
     "float":{  
        "type":"float",
        "searchable":true,
        "aggregatable":true,
        "indices":[  
           "its-vmw-vhost-2018.05",
           "its-vmw-vhost-2018.06"
        ]
     },
2

Hey @kottapar, have you tried refreshing your index pattern by going to Management -> Index Patterns, selecting the problematic index pattern and clicking the "Refresh" button highlighted below?

14%20PM

3

yep, I even deleted and recreated the index too :slight_smile:
I've already checked your reply in https://discuss.elastic.co/t/kibana-shows-fields-are-not-searchable-and-aggregatable/89148/6 and that's how I queried for the _field_caps.
I'm using the csv filter in logstash and the mutate filter to convert it to float.

"VMs_per_core" => "float"
"vCPUs_per_core" => "float"
"Num_VCPUs" => "integer"
4

Which version of Kibana/Elasticsearch are you using?

Also, would you mind executing a CURL request similar to the following against Elasticsearch and posting the raw response here? curl http://localhost:9200/logstash-/_field_caps?fields= -u elastic:changeme. You'll want to replace logstash-* with your index pattern and the elasticsearch URL and username/password will likely need to change.

6

Here's the output. It says the values are searchable and aggregatable.

  "VMs_per_Core":{  
 "float":{  
    "type":"float",
    "searchable":true,
    "aggregatable":true,
    "indices":[  
       "its-vmw-vhost-2018.05",
       "its-vmw-vhost-2018.06"
    ]
 },

  "vCPUs_per_Core":{  
     "float":{  
        "type":"float",
        "searchable":true,
        "aggregatable":true,
        "indices":[  
           "its-vmw-vhost-2018.05",
           "its-vmw-vhost-2018.06"
        ]
     },
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.