Dashes in hostname splits Vertical bar chart?

Elastic Stack Kibana
1

Hi !

My hostnames follow the format COUNTRYCODE-CITYCODE-NAME ( e.g: GE-HAM-SWSUS ) .

When I create a vertical bar chart and use the hostname for the split chart option to get more servers monitored on the dashboard, I do get 3 bars instead of just one.

One bar group for GE, one for HAM and another one for SWSUS .

How can I aviod this ?

Any hint would be very much apreciated.

Kind regards,
Nadir

2

Read this: https://discuss.elastic.co/t/kibana-splitting-fields-with-dots-or-spaces-in-them/61298/2

3

It sounds like the field is analyzed, so elasticsearch is tokenizing your hostname. In 5.x, you'll want to map this field as keyword. In 2.x you'll want to map it as not_analyzed - see https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-index.html for more info.