Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Fields not usable in Wazuh Dashboard due to missing cached mappings" #470

Open
gokul20010530 opened this issue Dec 27, 2024 · 0 comments
Open

Comments

@gokul20010530
Copy link

Describe the bug
Hi ,
I have an issue regarding field in wazuh dashboard, where I am not able to use the fields.
It is showing "No cached mapping for this field. Refresh field list from the Management > Index patterns page"
As mentioned when I have done the refresh the fields will appear in the "wazuh-alerts-*" at that moment but again go back to how it was before refreshing.

I had checked about this issue and could only find "Refresh the field list" as a solution.
But, that is not working in my case. It just works for sometime and it is reverted back to how it was before refreshing the field list.

Here are some screenshots of the issue:

Image

Image

This is number of fields in "wazuh-alerts-*" before refreshing.
Image

This is number of fields after refreshing "wazuh-alerts-*"
Image

This gets reverted back to how it was before refreshing after sometime.

Also, I would like to point out that there is no problem with default fields.

All the solution got was to refresh the field list. But it does not work out.

Wazuh version being used is version 4.7

Looking forward for a solution for this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant