Filtering visualization field

[tiberiu88]

Thanks for the response. It works, but unfortunately the field that I'm trying to split is "analyzed", and I've tried everything to change it, with no luck.

I opened a new thread as to not spam this one.

Changing beat.hostname to not_analyzed

Hi, I've been trying to solve this issue all day, no solutions online work for me. When using topbeat (or another beat), the beat.hostname field (string), comes up as analyzed, screwing up the graphs. I saw that there are two solutions to this: Automatically load a template where you specify "not_analyzed" for the field. Manually load the same thing using an HTTP PUT. I cannot do #2 due to configurations of my network. I tried #1, with no results. When changing the json.template, I succes…

Any help greatly appreciated.

Thanks