# Thousands of predefined fields visible in "Default fields" in discover

**URL:** https://discuss.elastic.co/t/thousands-of-predefined-fields-visible-in-default-fields-in-discover/368534
**Category:** Kibana
**Created:** [October 9, 2024, 1:26pm UTC](https://discuss.elastic.co/t/thousands-of-predefined-fields-visible-in-default-fields-in-discover/368534 "2024-10-09T13:26:53Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![rkrzewski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rkrzewski/32/138211_2.png) [@rkrzewski](https://discuss.elastic.co/u/rkrzewski)
#### Post date: [October 9, 2024, 1:26pm UTC](https://discuss.elastic.co/t/thousands-of-predefined-fields-visible-in-default-fields-in-discover/368534/1 "2024-10-09T13:26:53Z")

</div>

I'm running Kibana/Elasticsearch/FileBeat 8.12.0 on Kubernetes, deployed using ECK operator.  
I'm only collecting logs from selected workloads in the kubernetes cluster.  
My filebeat configuration looks like this:

```auto
    filebeat:
      modules: []
      overwrite_pipelines: true
      autodiscover:
        providers:
        - type: kubernetes
          node: ${NODE_NAME}
          add_resource_metadata:
            node:
              enabled: false
            cronjob: true
            deployment: true
          hints:
            enabled: true
            default_config:
              enabled: false
              type: container
              paths:
              - /var/log/containers/*${data.kubernetes.container.id}.log

```

My index contains less than 50 fields.  
However in the Discover view of Kibana, "Available fields" sections shows 7223 entries. Name prefixes of the fields look like they could be related to Filebetat plugins: activemq, aws, awscloudwatch, azure and so on.

I'm looking for a way of configuring FIlebeat and/or Kibana to show only the fields that actually exists on my index.

My attempts to disable Filebeat plugins didn't help. I can see many entries in the Mappings pane in Stack Management \> Index Management \> Templates \> filebeat-8.12.0 \> Edit screen and I guess I could try deleting them, but I think my changes will get reverted by the ECK operator.

Any pointers how to sort that out appreciated!

---

<div class="post-metadata">

### Author: ![jughosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jughosta/32/107160_2.png) [@jughosta](https://discuss.elastic.co/u/jughosta)
#### Post date: [October 10, 2024, 8:14am UTC](https://discuss.elastic.co/t/thousands-of-predefined-fields-visible-in-default-fields-in-discover/368534/2 "2024-10-10T08:14:55Z")

</div>

Hi @rkrzewski,

Welcome to the community!

Sorry for the inconvenience! This was improved in 8.13 [[UnifiedFieldList] Categorize fields as empty that never had a value in matching indices by kertal · Pull Request #174063 · elastic/kibana · GitHub](https://github.com/elastic/kibana/pull/174063)

As a workaround for 8.12, Data View Field filters could be defined on Stack Management \> Data Views \> Your data view \> Field filters tab.

---

<div class="post-metadata">

### Author: ![rkrzewski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rkrzewski/32/138211_2.png) [@rkrzewski](https://discuss.elastic.co/u/rkrzewski)
#### Post date: [October 10, 2024, 9:20am UTC](https://discuss.elastic.co/t/thousands-of-predefined-fields-visible-in-default-fields-in-discover/368534/3 "2024-10-10T09:20:40Z")

</div>

Thanks so much Julia!

I've upgraded my ELK stack to 8.13.0 using ECK operator and it did resolve the issue.
