When you ship a new log type to Logz.io for the first time, certain fields may not be mapped. To use those fields in searches or visualizations, you must tell Kibana to refresh the mapping.
There are two ways to update the mapping in Kibana.
1. Go to Kibana --> Discover and open up one of the logs. Within the fields list, you may see a hazard sign with blue icon next to it. Click on the blue icon to refresh the mapping for all the fields:
2. Click on the cogwheel in the top right corner, and then click on the "Refresh mapping" button.