Include/ Exclude pattern

(Saket Kumar) #1

I have one field whose values are in following format "application/x-javascript", "text/html", "text/css".
When plotting at kibana graph its splitting as follows "application", "x" and "javascript".

I would like to view in first application, text. and when i click on application to further drill down i should be able to see...
x-javascript, x-shockwave etc.

Is there any way to achieve this?

(Tanya Bragin) #2

You should pre-parse the field in question to split values on the slash and store the additional fields in Elasticsearch prior to operating on them in Kibana.

Alternatively, you could turn on static Groovy scripts in Elasticsearch and use Kibana Scripted Fields to create these values (more on that in this thread), but that can be quite cumbersome.

(system) closed #3