Include/ Exclude pattern

You should pre-parse the field in question to split values on the slash and store the additional fields in Elasticsearch prior to operating on them in Kibana.

Alternatively, you could turn on static Groovy scripts in Elasticsearch and use Kibana Scripted Fields to create these values (more on that in this thread), but that can be quite cumbersome.