Skip to content

Doc fields added by Filebeat aren't included in index pattern field list #6983

@Bargs

Description

@Bargs

Things like beat.name, type, offset. They're sent by Filebeat by default so they show up in Discover's doc viewer with a warning icon about how they're not in Kibana's mapping cache. I'm not sure how we fix it in the short term since it would require Kibana to have special knowledge about which fields Filebeat exports by default. Even then, the user has the ability to configure which fields are included, so the defaults might not be right.

I'm thinking we should just live with it the way it is for now. Long term we'll be getting rid of the field cache (#6498) which will make this problem disappear entirely. I'd like to know if other people agree with this conclusion.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions