# Unable to make a field aggregatable in kibana/ES

**URL:** <https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925>\
**Category:** Kibana\
**Created:** [December 22, 2018, 5:02pm UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925 "2018-12-22T17:02:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sid\_nikhil](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\
**Post date:** [December 22, 2018, 5:02pm UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925/1 "2018-12-22T17:02:42Z")

</div>

I have a field called "message" . I need to make it as aggregatable. I am unable to do so .  
Can someone please suggest how to achieve that.

 ![Capture_kibana_aggregation](https://us1.discourse-cdn.com/elastic/original/3X/e/4/e4e4bb234b6bd38325536a9795f7563d99b2e825.png)

I have already followed the steps in the following Link .. still not able to make message field aggregatable

> [@Unable to make a field aggregatable in kibana](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana/161912/3):
>
> I did this in Dev tools PUT /filebeat { "mappings": { "\_doc": { "properties": { "message": { "type": "keyword" } } } } } But still message field is not aggregatable [Capture\_kibana\_aggregation] If my field is message , do you mean i should use message.doc\_values This is my painless script to extract last word from message: String parts = /-/.split(doc['message'].value); return parts[-1] …

Can someone please suggest how to achieve that.

---

<div class="post-metadata">

**Author:** ![Bill\_McConaghy](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Bill\_McConaghy](https://discuss.elastic.co/u/Bill_McConaghy)\
**Post date:** [January 10, 2019, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925/2 "2019-01-10T14:32:58Z")

</div>

Take a look at the answer to this forum post for advice on how to do this: [Can I make string field as aggregatable?](https://discuss.elastic.co/t/can-i-make-string-field-as-aggregatable/101881)

---

<div class="post-metadata">

**Author:** ![1119495293](https://avatars.discourse-cdn.com/v4/letter/1/b9e5f3/32.png) [@1119495293](https://discuss.elastic.co/u/1119495293)\
**Post date:** [January 11, 2019, 8:48am UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925/3 "2019-01-11T08:48:16Z")

</div>

refresh

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2019, 8:48am UTC](https://discuss.elastic.co/t/unable-to-make-a-field-aggregatable-in-kibana-es/161925/4 "2019-02-08T08:48:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.