# Incorrect visualization displayed for field names containing spaces

**URL:** <https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402>\
**Category:** Kibana\
**Created:** [May 19, 2016, 5:41am UTC](https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402 "2016-05-19T05:41:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Post date:** [May 19, 2016, 5:41am UTC](https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402/1 "2016-05-19T05:41:48Z")

</div>

![](https://us1.discourse-cdn.com/elastic/original/2X/3/351bbe9196bfc8b1632f6738b93e56a904520daf.png)

Here, the data visualization captured for each HTTP Response Code(Reason Phrase) is displayed incorrectly.

In actual, my response phrases captured in logs are OK, Unauthorized, Bad Request, Service Unavailable, etc. For OK and Unauthorized it shows correctly, but wherever it finds a space, incorrect visualization is set. i.e. for Bad Request and Service Unavailable.

Ideally, the right hand panel should show Bad Request and Service Unavailable together.

The same thing happens for my URL visualization. It breaks my URL "api/myservice/phone" into api, myservice and phone.

What can I do here ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 19, 2016, 1:04pm UTC](https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402/2 "2016-05-19T13:04:13Z")

</div>

As per that yellow `!`, you are trying to graph an analysed field. This means that ES splits on things like white spaces.

Are you using Logstash to ingest this data?

---

<div class="post-metadata">

**Author:** ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Post date:** [May 19, 2016, 2:31pm UTC](https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402/3 "2016-05-19T14:31:51Z")

</div>

Nope, I am not using Logstash to ingest data. I am using a Elastic Search sink (Semantic Logging) to put data directly into ES database.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:52pm UTC](https://discuss.elastic.co/t/incorrect-visualization-displayed-for-field-names-containing-spaces/50402/4 "2017-07-06T13:52:53Z")

</div>