Visualization in Kibana for Custome field

Elastic Stack Kibana
1

HI All,
We have application log in JSON format with key value pair and those keys are coming as Fields in Kibana GUI. WIth this field I am able to parse in text filter but those field does not have virtualization option neither those are showing under Visualization tab under Term.
Please let us know how to use those custom added fields as Visualization

Regards,
Subrat

2

Hello,

So Kibana is using term aggregations in elasticsearch. Terms aggregation | Elasticsearch Reference [7.11] | Elastic

For Kibana to display the field you want in UI in visualizations under terms agg - the field has to be mapped as

 `terms` aggregation should be a field of type `keyword` or any other data type suitable for bucket aggregations. In order to use it with `text` you will need to enable [fielddata](https://www.elastic.co/guide/en/elasticsearch/reference/current/fielddata.html)."

So I suspect you will need to check your field mapping in elasticsearch and make changes to mappings if necessary.

Thanks
Bhavya
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.