Terms >255 characters are counted as "Missing field" in terms panel

[jimmyjones2]

eg. the following JSON:

{"fuzz": "jashdygayusdgyuagsdyugayusdgyuagsyudgayusgdyusagduyguguygyuftftyftksdfkhsdfkushdfkuhsdfkuhsfdkuhskdufhksudhfkushdfkuhsdkfuhsdfksasdiuhsadiuhasdiuahsdiuahsdiuashdiuahsdiuhasiudhaiushdaiushdsdfoijsdfoijsdfoijsdfoijsdfoijsdfoijsdfoijsdoifjsdoifjsdf12345678901" }

A terms panel on this field will count this value as a "Missing field". If you remove one character from the above it will work.

[rashidkpc]

I'm guessing you're using Logstash? This is due to a setting in the default logstash elasticsearch mapping:

"mapping" : {
             "type" : "string", "index" : "analyzed", "omit_norms" : true,
               "fields" : {
                 "raw" : {"type": "string", "index" : "not_analyzed", "ignore_above" : 256}
               }
           }

Note the "ignore_above"

[jimmyjones2]

Not using logstash. I didn't define a mapping, ES created:

{"mappings":{"post":{"properties":{"fuzz":{"type":"string"}}}}}

Having said that, I had a look at the response coming back from ES, and it says the field is missing, so is an ES issue, not Kibana.