search

opensearch-project / OpenSearch-Dashboards

📊 Open source visualization dashboards for OpenSearch.
https://opensearch.org/docs/latest/dashboards/index/
Apache License 2.0
1.65k stars 865 forks source link

IIS fileds not available when creating Visualizations #3821

Open abduraw3437 opened 1 year ago

abduraw3437 commented 1 year ago

Hi ..

Teams are trying to recreate the Visualisations they had in Elastic in OpenSearch but cannot find the IIS options under Fields. Please see attached and advise. Thanks

Waleed

MicrosoftTeams-image (1) MicrosoftTeams-image

joshuarrrr commented 1 year ago

@abduraw3437 Can you provide a little more debugging info?

The first thing to verify is whether that http.response.status_code field actually exists in your OpenSearch index, and that it's mapped correctly in the filebeat-front-end-* index pattern.

One easy way to do so is to use Discover, which will show all the fields available for the selected index pattern. You can also use the /_mapping OpenSearch API endpoint via the Developer Tools console. https://opensearch.org/docs/latest/field-types/mappings/

Note that the visualization tool will only show fields that are visualizable, so once you've verified that the fields are present and mapped correctly, we can move on to other debugging steps.