I am stuck with a strange issue. I have a field which contains the first 50 characters of an error log.
All values appear when i search for events via "Discover".
However, when trying to bucket by the field in a visual some values in this field are not being included. Any ideas why this might be? Could it be invalid characters?