# Variables showing up in the discover tab not showing up in Visualize

**URL:** <https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562>\
**Category:** Kibana\
**Created:** [July 15, 2019, 2:44pm UTC](https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562 "2019-07-15T14:44:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kchao](https://avatars.discourse-cdn.com/v4/letter/k/47e85d/32.png) [@kchao](https://discuss.elastic.co/u/kchao)\
**Post date:** [July 15, 2019, 2:44pm UTC](https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562/1 "2019-07-15T14:44:33Z")

</div>

I've modified logstash.conf so that it will parse the message from IIS logs and I am seeing results in the discover tab but unfortunately, it is not showing up in visualize. I am pretty sure this is because I have not modified fields.yml. Is there a way to get the variables parsed from grok to show in the visualize tab by editing fields.yml from Filebeat?

My fields.yml is unmodified from the elastic default from filebeat 7.2.0  
My logstash.conf file is simple and only has a grok filter

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 15, 2019, 8:33pm UTC](https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562/2 "2019-07-15T20:33:30Z")

</div>

That looks like either a filebeat of Kibana question, not a logstash question.

---

<div class="post-metadata">

**Author:** ![kchao](https://avatars.discourse-cdn.com/v4/letter/k/47e85d/32.png) [@kchao](https://discuss.elastic.co/u/kchao)\
**Post date:** [July 16, 2019, 3:21pm UTC](https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562/3 "2019-07-16T15:21:50Z")

</div>

I'm not completely sure but my filebeat data has to go through Logstash and is parsed by Logstash.conf so I put it under Logstash. I will edit to add tags though, thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 13, 2019, 3:22pm UTC](https://discuss.elastic.co/t/variables-showing-up-in-the-discover-tab-not-showing-up-in-visualize/190562/4 "2019-08-13T15:22:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.