Issues with visualization in Kibana 4.4.2

Elastic Stack Kibana
1

Dear Team,

I am using Elasticsearch V2.2.0 and Kibana 4.4.2. One of my data sources has a field called "promo_name". This field is a string type and some records contain spaces. I have observed when I create visualizations that the records when summarized show on multiple lines. Is this expected?

For example:
Promo Name = 'Example dot com'.
Total Megabytes = 4Mb

Visual will show:
Promo Name = 'Example'
Total Megabytes = 4Mb

Promo Name = 'dot'
Total Megabytes = 4Mb

Promo Name = 'com'
Total Megabytes = 4Mb

Data is loaded via logstash. Maybe I need to replace the space with "_" or similar characters?

Wayne

2

This is because it's an analyzed field. If you are using the default logstash template, you should have field names with .raw appended. These are fields which are not analyzed. Use those instead for aggregations.

3

Thanks for confirming. I will take a look and set to solved if this solves the problem