text fields do not show its value preview under filter

[enotspe]

I think that what it is going on is that the plugin is considering the field mapping as 'text' in the context of Elasticsearch, where there is a distinguish between 'text' and 'keyword' types.

I guess that for the values to be previewed the quickwit-datasource plugin expects 'keyword' type

[enotspe]

destination.ip is type: ip
destination.mac is type: text

type: u64 fields do not show its value preview either

[fmassot]

thanks @enotspe for the feedback. Can you check that destination.map is a fast field?

[enotspe]

It is indeed a fast field.

I have tried raw and default tokenizer.

It does not preview numeric fields either, type: u64