Extract (substring) and count(distinct) in Kibana

mmm .. good point but I am not fully convinced it is the only way to achieve that. I guess and hope ElasticSearch should have some built-in mechanism to manipulate the string

anyway, thanks for your hint