Cowrie Visualization Top URL Download Error

[d3athg0d]

Hi,

i have updated kibana and tpotce all to the latest version, however am still facing the same issue on the dashboard

Bucket
Field
url.keyword <== invalid

how can i rectify this?

[t3chn0m4g3]

As long the field has not been populated it will not show and throw the error. Check if the Cowrie log files in the data folder actually populated the field.
If the did follow the Wiki to install the latest Kibana objects.

[d3athg0d]

Hi,

the field url.keyword will populate by itself?

because it is not in the drop down list of the index pattern

[t3chn0m4g3]

Yes.