Kibana group by terms

Elastic Stack Elasticsearch
#1

I'm using Kibana w/ logstash to view web server logs. I'd like to add a
graph that displays uniques of the entire User-Agent string. I've tried
adding a terms graph, but that breaks the UA string into separate words,
which is less than desirable in this situation. Is there a way to do this?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5a5f529e-e326-4a29-aa0f-d656a37848d4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

#2

Michael,

If the value is being parsed into separate words, just try using the
FIELD.raw version instead,

Best,

LM

On Friday, October 17, 2014 9:54:40 PM UTC+2, Michael Irwin wrote:

I'm using Kibana w/ logstash to view web server logs. I'd like to add a
graph that displays uniques of the entire User-Agent string. I've tried
adding a terms graph, but that breaks the UA string into separate words,
which is less than desirable in this situation. Is there a way to do this?

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/c64b4302-74cd-4afb-8d9a-3a8b245ce94d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

#3

That's what I needed. Thanks!

Mike

On 2014-10-18, Lorenzo Mangani wrote:

Michael,

If the value is being parsed into separate words, just try using the
FIELD.raw version instead,

Best,

LM

On Friday, October 17, 2014 9:54:40 PM UTC+2, Michael Irwin wrote:

I'm using Kibana w/ logstash to view web server logs. I'd like to add a
graph that displays uniques of the entire User-Agent string. I've tried
adding a terms graph, but that breaks the UA string into separate words,
which is less than desirable in this situation. Is there a way to do this?

--
You received this message because you are subscribed to a topic in the Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/elasticsearch/5lGO9ol7qug/unsubscribe.
To unsubscribe from this group and all its topics, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/c64b4302-74cd-4afb-8d9a-3a8b245ce94d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20141018143757.GA27619%40bonzo.
For more options, visit https://groups.google.com/d/optout.

#4

Can you please tell me how can I use Field. Raw to avoid the breaking of field values.

#5