# How to graph a pie including null values

**URL:** <https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071>\
**Category:** Kibana\
**Created:** [June 24, 2019, 8:00am UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071 "2019-06-24T08:00:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![DidierB](https://avatars.discourse-cdn.com/v4/letter/d/ed8c4c/32.png) [@DidierB](https://discuss.elastic.co/u/DidierB)\
**Post date:** [June 24, 2019, 8:00am UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071/1 "2019-06-24T08:00:59Z")

</div>

Hello,

I have a lot of apache logs and I would like to make a pie about terms of a field that may contain any string, and often contains "-".

According to [this comment](https://discuss.elastic.co/t/exclude-dash-in-kibana-search/77572/4), the "-" is seen as null by Elasticsearch. When I do the pie with terms, I only have the other strings, (there is only two other values possible) and no "-", while most of the pie should be about "-" logs.

How can I do a pie that includes the "-" values?

I'm using Elasticsearch/Kibana 6.0.0.

---

<div class="post-metadata">

**Author:** ![christophilus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophilus/32/42991_2.png) [@christophilus](https://discuss.elastic.co/u/christophilus)\
**Post date:** [July 2, 2019, 7:00pm UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071/2 "2019-07-02T19:00:06Z")

</div>

![image](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1b55e74f4b7e6494d6bdbf02279e623f0c56eda.png)

The green slice there is a "-". I'm running the latest 7.x version, but I don't think that was a very recent change. How capable are you of upgrading to the latest 6.x?

---

<div class="post-metadata">

**Author:** ![DidierB](https://avatars.discourse-cdn.com/v4/letter/d/ed8c4c/32.png) [@DidierB](https://discuss.elastic.co/u/DidierB)\
**Post date:** [July 3, 2019, 8:00am UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071/3 "2019-07-03T08:00:29Z")

</div>

It's a production cluster on a "old fashioned infrastructure" which mean that the upgrade will take time and has to be planed.

However I'm interested to know the settings of your tokenizer. I use:

> "settings": {  
> "analysis": {  
> "analyzer": {  
> "keylower": {  
> "filter": "lowercase",  
> "tokenizer": "keyword"  
> }  
> }  
> },

---

<div class="post-metadata">

**Author:** ![christophilus](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophilus/32/42991_2.png) [@christophilus](https://discuss.elastic.co/u/christophilus)\
**Post date:** [July 3, 2019, 3:14pm UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071/4 "2019-07-03T15:14:24Z")

</div>

I didn't set up a tokenizer, in my case. Just used whatever the default is.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 31, 2019, 3:14pm UTC](https://discuss.elastic.co/t/how-to-graph-a-pie-including-null-values/187071/5 "2019-07-31T15:14:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.