Vizualization with message.keyword in Kibana 6.7

[Carlos_Bodini (Carlos Eduardo Bodini Ribeiro)]

hey guys!

I had a Table Vizualization in Kibana 6.5, but now I updated the service to 6.7 and the field message.keyword is not present anymore.

I was spliting a row using Terms and the field was message.keyword, so in this way I had the complete list of errors that occurred in the selected time frame.

any suggestions?

thanks!!

[nickpeihl]

Do you see the message.keyword field in your Index Pattern in the Management tab? If not, maybe try Reloading the Index Fields List.

You could also check the mapping for your index and see if the message field is mapped as type: 'keyword'.

However, you may want full-text search on the message field also, so the mapping may need to be a multi-field.