kibana index field list being reset after some period of time

Solution In Progress - Updated -

Issue

  • There are couple of dashboards created, that do some aggregations on fields in the logs. Some of these fields are not standard, eg kubernetes.labels.my-label.
  • Elasticsearch keeps some meta data about fields in the documents of a certain type for each index. eg, field kubernetes.labels.my-label.
  • These mappings seem to periodically reset/empty themselves, which breaks the dashboard.
  • The fields kubernetes.pod_name, or kubernetes.node always make it back into the mapping which were disabled.
  • The fields kubernetes.label.deploymentconfig, response.status, or request.headers.host all do not make it back in the mapping.

Environment

  • OpenShift Container Platform
    • 3.5

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.