Terms Aggregation in kibana Visualization - keyword field not found

Elastic Stack Kibana
1

Hi

when defining a mapping as

PUT spl
{
  "mappings": {
    "spl": {
      "properties": {
        "list": {
          "type": "keyword"
        }
      }
    }
  }
}

The fields selection in the visualization / aggregation setup shows a field list.keyword, but the aggregation does not find any data. ( Terms aggregation works with DSL fo rhti smapping)

Setting up the mapping as

PUT spl
{
  "mappings": {
    "spl": {
      "properties": {
        "list": {
          "type": "keyword",
"fields": {
              "keyword": {
                "type": "keyword",
                "ignore_above": 256
              }
            }
        }
      }
    }
  }
}

fixes the issues, but is this not a bit redundant ?

Or is there something else incorrect in my mapping / understanding

Thanks

1 Like
2

Your first mapping should be sufficient, but Kibana might have an out-of-date cache. When you change your mapping you need to go to the index pattern in Kibana's Management > Index Patterns app and click the refresh button on the top right of the page.

image

1 Like
3

Thanks for your reply, this indeed solved the issue.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.