# Refresh field list added a lot of new unwanted fields

**URL:** <https://discuss.elastic.co/t/refresh-field-list-added-a-lot-of-new-unwanted-fields/152227>\
**Category:** Logstash\
**Created:** [October 12, 2018, 11:10am UTC](https://discuss.elastic.co/t/refresh-field-list-added-a-lot-of-new-unwanted-fields/152227 "2018-10-12T11:10:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![undelete](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/undelete/32/24186_2.png) [@undelete](https://discuss.elastic.co/u/undelete)\
**Post date:** [October 12, 2018, 11:10am UTC](https://discuss.elastic.co/t/refresh-field-list-added-a-lot-of-new-unwanted-fields/152227/1 "2018-10-12T11:10:26Z")

</div>

Hi,

I'm still very new at Elasticsearch. I am explicitly using the ArcSight Module with Logstash to populate my database and today I noticied that after update to 6.4.1 a field was missing in the index. I looked in management and index patterns (arcsight-\*) and sourceUserName could not be found anymore. I pressed the button "Refresh field list" which actually made me see the field again, but it also added a myriad of fields that should not be there (fields that actually look like values). How can I fix this? Going back to the original ArcSight index. Thanks in advance!

---

<div class="post-metadata">

**Author:** ![undelete](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/undelete/32/24186_2.png) [@undelete](https://discuss.elastic.co/u/undelete)\
**Post date:** [October 18, 2018, 5:20am UTC](https://discuss.elastic.co/t/refresh-field-list-added-a-lot-of-new-unwanted-fields/152227/2 "2018-10-18T05:20:39Z")

</div>

Anyone? I guess it does not have to be related to the ArcSight Module, but more the button "Refresh field list" and the fields that went missing. How to restore without getting all the junk-fields?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 15, 2018, 5:20am UTC](https://discuss.elastic.co/t/refresh-field-list-added-a-lot-of-new-unwanted-fields/152227/3 "2018-11-15T05:20:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.