I am using MetricBeat to capture statistics and send data to Logstash. Logstash then reads input from Beats and sends the data to Elasticsearch. Data is present in Elasticsearch & Kibana index shows the data read from Elasticsearch.
After Downloading and Loading Sample Beats dashboard, the dashboard/Visualizations give an error on opening. The error obtained is:-
Saved "field" parameter is now invalid. Please select a new field.
Visualize: "field" is a required parameter
I have been able to debug the issue & found that the fields containing beat information such as beat.name, beat.hostname are being used by the sample beats dashboard which is non-aggregatable fields. However, when editing the visualization and changing the visualization value from beat.name to beat.name.keyword works and the visualization is shown.
This issue is being observed for all the fields having datatype as string. Such fields without .keyword parameter are non-aggregatable while the fields with .keyword are aggregatable.
Is there any way to solve this issue so that fields without .keyword become aggregatable fields and Dashboard/Visualizations will be shown.