# Static Mappings Ignored by Some Fields While Others Work

**URL:** <https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415>\
**Category:** Elasticsearch\
**Created:** [August 18, 2022, 10:28pm UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415 "2022-08-18T22:28:19Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![othman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/othman/32/109872_2.png) [@othman](https://discuss.elastic.co/u/othman)\
**Post date:** [August 18, 2022, 10:28pm UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415/1 "2022-08-18T22:28:19Z")

</div>

I'm fairly new to ELK stack so most likely I'm just doing something dumb. I've failed to find suitable Google results hence this post.

I have an Index Template configured with mappings, and I create a fresh index and store some documents in it, but only some fields get mapped properly (e.g. `rule_name`, `message`) while Kibana shows the other fields (e.g. `tags`, `url`) as "unknown fields".

 ![2022-08-19_01-16](https://us1.discourse-cdn.com/elastic/original/3X/1/e/1e102a401d3f641f8abd2860fba27c6f79d3cc2a.png)

 ![2022-08-19_01-18](https://us1.discourse-cdn.com/elastic/original/3X/e/a/ea9ac644bd7d4bbce584712b987b25212987bee2.png)

### Data JSON

```auto
{
  "_index": "logs-REMOVED.alerts",
  "_id": "QkQGs4IBxLlR-_ZMQ9ul",
  "_version": 1,
  "_score": 0,
  "_source": {
    "rule_id": "e9876de0-1ec9-11ed-8477-7b5684a31dfa",
    "rule_name": "Uptime Monitors (Networking)",
    "alert_id": "unifi_controller__https_unifi_REMOVED_com_REMOVED",
    "monitor_type": "http",
    "tags": "networking",
    "url": "https://unifi.REMOVED.com:8443",
    "message": "Get \"https://unifi.REMOVED.com:8443\": x509: certificate has expired or is not yet valid: current time 2022-08-19T01:14:21+03:00 is after 2022-03-16T09:25:02Z",
    "@timestamp": "2022-08-18T22:15:08.452Z"
  },
  "fields": {
    "rule_id": [
      "e9876de0-1ec9-11ed-8477-7b5684a31dfa"
    ],
    "@timestamp": [
      "2022-08-18T22:15:08.452Z"
    ],
    "rule_name": [
      "Uptime Monitors (Networking)"
    ],
    "alert_id": [
      "unifi_controller__https_unifi_REMOVED_com_8443_REMOVED"
    ],
    "alert_id.keyword": [
      "unifi_controller__https_unifi_REMOVED_com_8443_REMOVED"
    ],
    "message": [
      "Get \"https://unifi.REMOVED.com:8443\": x509: certificate has expired or is not yet valid: current time 2022-08-19T01:14:21+03:00 is after 2022-03-16T09:25:02Z"
    ],
    "monitor_type": [
      "http"
    ],
    "url": [
      "https://unifi.REMOVED.com:8443"
    ],
    "tags": [
      "networking"
    ]
  }
}

```

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [August 18, 2022, 10:57pm UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415/2 "2022-08-18T22:57:09Z")

</div>

Hi @othman

What version of the stack? I ask because there is some different behavior with index patterns between now and a couple versions ago.

In Discover What happens if you do a Shift Reload... and / or did you go and delete and re-create the Index Pattern?

You're missing `alert` in your mapping BTW

---

<div class="post-metadata">

**Author:** ![othman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/othman/32/109872_2.png) [@othman](https://discuss.elastic.co/u/othman)\
**Post date:** [August 19, 2022, 7:41am UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415/3 "2022-08-19T07:41:56Z")

</div>

Hi @stephenb

Thank you for the reply.

Forgot to state that I am using Elasticsearch/Kibana version 8.3.3.

Oh my, I just tried Shift + Reload as you suggested and it fixed the issue. Looks like it was just a browser caching issue, was driving me insane! Thank you very much!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 16, 2022, 7:42am UTC](https://discuss.elastic.co/t/static-mappings-ignored-by-some-fields-while-others-work/312415/4 "2022-09-16T07:42:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.