Keyword fields index the number of unique documents for each unique value of that field. They should be used for fields containing structured data such as email addresses, IP addresses, status codes, etc.
In order to do a Significant Terms query on a text field, you'll need to enable fielddata on the mappings. For example:
PUT /twitter_stream/_mapping
{
"properties": {
"text": {
"type": "text",
"fielddata": true,
"fields": {
"keyword": {
"type": "keyword",
"ignore_above": 256
}
}
}
}
}
Once you've done that, go to Management > Index Patterns and refresh the index pattern to make Kibana re-read the mappings. Now the text field should show up in the Significant Terms dropdown.
You may not get any results because there is only a single document in the index, so no words are "significant". Add a few more documents to start getting results.