Reputation: 2233
Although my fields are visible in the discover tab, I can't make any kind of visualization with them and i got this message:
No results displayed because all values equal 0.
This is the data in the discover tab:
**index mappings:*
{
"mapping": {
"httpbeat": {
"_meta": {
"version": "5.2.1"
},
..........
"response": {
.....
"headers": {
"type": "nested",
"properties": {
"Content-Type": {
"type": "keyword",
"ignore_above": 1024
},
"Date": {
"type": "keyword",
"ignore_above": 1024
},
"X-Application-Context": {
"type": "keyword",
"ignore_above": 1024
}
}
},
"jsonBody": {
"type": "nested",
"properties": {
"classes": {
"type": "long"
},
"classes_loaded": {
"type": "long"
},
"classes_unloaded": {
"type": "long"
},
"counter_status_200_health": {
"type": "long"
},
"counter_status_200_login": {
"type": "long"
},
"counter_status_200_metrics": {
"type": "long"
},
"counter_status_302_unmapped": {
"type": "long"
},
"gauge_response_health": {
"type": "long"
}, ..}
any help please?
PS: The JSON code of the mapping is not completed due to the post rules.
Upvotes: 0
Views: 2738
Reputation: 2233
[Solution] I found a solution for that, in fact httpbeat 5.6.x cannot work with kibana , only httpbeat v4.1.0 is supported ! so to visualize data you have to change the version of httpbeat (the other version give nested json documents and the nested fields are not supported with kibana )
Upvotes: 0
Reputation: 1467
Simply, the error message indicates that there is nothing shown regarding your aggregation, metric, time range etc. Therefore, even though documents exist on elasticsearch, they cannot be drawn on a visualisation. In order to solve the issue:
Upvotes: 1