All hosts Dashboard : host.name field is splitted when there is "-" (dash) in naming

Elastic Security
1

Hi,

I am trying to configure Elastic Security. After parsing logs to the right fields, when I open Security > Hosts > All hosts it's splitting my hostnames if there is a "-" (dash. symbol ) in naming, and shows one host and two. For example if host.name contains value "ITDepartment-A0659", then in the "All hosts" list it will show "ITDepartment" and "A0659" as different hosts.
I suppose that it should be some configuration to change the symbol used for splitting, but I can't find the right place.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.