title: Kibana Visualize is not showing up all fields which are available on indexed data
body: <p>I am new to ELK stack. I am trying to analyze and process java stack logs from my application to get useful information. In my case after starting the logstash, I can see my data under Discover tab on Kibana portal, but as soon I am trying to create a visualization I am not getting all fields there. Also the data is inconsistent. Can someone please clarify what is wrong in my case. Below are my snippets.</p>
  <p><strong>Sample log file:</strong></p>
  <pre><code>Thread #1: t@-1824503488, lwp=10848, ref=0xb8535a0, session=84521D86BBE4D71690E2A6EF29A489BE:mx135721697661ec76bb:(WebServiceFacade.java:84), ms=0xa0819a40
  &lt;Start Stack Trace&gt;
    &lt;1 - ADK Verbose Trace Entry&gt;
    stateless dispatch for invokeClass.bosInterface executing
    Active: 18 minutes  50.00 seconds 
    User:
      User1
    Tenant:
      
    Session:
      84521D86BBE4D71690E2A6EF29A489BE:mx135721697661ec76bb:(WebServiceFacade.java:84)
    Parameters:
      bosContext _cntx:
        user:
          User Ag
        depth:
          3
        session id:
          84521D86BBE4D71690E2A6EF29A489BE:mx135721697661ec76bb:(WebServiceFacade.java:84)
      bosUTF _className:
        XXXXXProcess
      bosStringList _construct:
        2 entries
            $$MXRIP$$|java.util.HashMap
            10
      bosUTF _methodName:
        YYYYYYCopies
      bosStringList _params:
        2 entries
            $$MXRIP$$|java.util.HashMap
            9 
  </code></pre>
  <p><strong>logstash.conf file</strong></p>
  <pre><code>    input {
          file {
              path =&gt; &quot;C:/Temp/BOHLogs/SampleJava.log&quot;
              start_position =&gt; &quot;beginning&quot;
              sincedb_path =&gt; &quot;NUL&quot; 
              codec =&gt; multiline {
                  pattern =&gt; &quot;^Thread%{SPACE}%{GREEDYDATA}&quot;
                  negate =&gt; &quot;true&quot;
                  what =&gt; &quot;previous&quot;
              }
          }
      }
      filter {
          grok {
              match =&gt; [ &quot;message&quot;, &quot;%{NOTSPACE:Thread}:\s%{GREEDYDATA:Data}&quot; ]
          }
          kv {
              source =&gt; &quot;Data&quot;
              field_split =&gt; &quot; &quot;
              value_split =&gt; &quot;=&quot;
          }
          kv {
              source =&gt; &quot;Data&quot;
              field_split =&gt; &quot;\n&quot;
              value_split =&gt; &quot;:&quot;
          }
          date {
              match =&gt; [&quot;timestamp&quot;, &quot;yyyy-MM-dd HH:mm:ss,SSS Z&quot;, &quot;MMM dd, yyyy HH:mm:ss a&quot;]
          }
      }
      output {
          elasticsearch {
              hosts =&gt; [&quot;localhost:9200&quot;]
              index =&gt; &quot;dummya_log&quot;
          }
          stdout {codec =&gt; rubydebug}
      }
  </code></pre>
  <p><strong>Output in logstash window</strong>
  <a href="https://i.stack.imgur.com/e19zx.png" rel="nofollow noreferrer">Available fields on logstash window</a></p>
  <p><a href="https://i.stack.imgur.com/M6bSc.png" rel="nofollow noreferrer">Available fields in Visualize tab</a></p>