# Kibana. Regex contains

**URL:** https://discuss.elastic.co/t/kibana-regex-contains/123840
**Category:** Kibana
**Created:** [March 14, 2018, 6:05am UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840 "2018-03-14T06:05:33Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Aditya\_Desai](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@Aditya\_Desai](https://discuss.elastic.co/u/Aditya_Desai)
#### Post date: [March 14, 2018, 6:05am UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840/1 "2018-03-14T06:05:33Z")

</div>

Iam kibana beginner. so idk much bout it.  
I've data with field data as A, B, C sometime A B, A B C, B C, A, B A....  
Sometimes its a list of the values space separated  
I wanna have the visualization of aggregation of count of values for the field. Count of A, count of B.. But it considers the group A B or A B C as a different value  
Is there a way to make the Value A B C in all three buckets like a regex contains.  
The values A B C D....are dynamic and too many so can't have a filter to create buckets fot all values.  
Can someone help

---

<div class="post-metadata">

### Author: ![Bill\_McConaghy](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Bill\_McConaghy](https://discuss.elastic.co/u/Bill_McConaghy)
#### Post date: [March 15, 2018, 7:18pm UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840/2 "2018-03-15T19:18:31Z")

</div>

It sounds like the field that you are using is not analyzed. I would suggest looking at this documentation: [Recent data missing in dashboard/visualizations](https://discuss.elastic.co/t/recent-data-missing-in-dashboard-visualizations/124119)

You will likely need to create a new index with the proper mapping set up for that field so it is analyzed into A B C ... as separate values and reindex all your data into it and then you can bucket as you are trying to do.

---

<div class="post-metadata">

### Author: ![Aditya\_Desai](https://avatars.discourse-cdn.com/v4/letter/a/e9c0ed/32.png) [@Aditya\_Desai](https://discuss.elastic.co/u/Aditya_Desai)
#### Post date: [March 16, 2018, 3:41am UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840/3 "2018-03-16T03:41:09Z")

</div>

Hi  
It is not missing the value [A B C].. it shows it as a different value in the chart when I aggregate on the terms. reindexing of A B C by splitting into 3 different values... Itd be similar to normalization in SQL? But how to do it?

---

<div class="post-metadata">

### Author: ![Bill\_McConaghy](https://avatars.discourse-cdn.com/v4/letter/b/ed655f/32.png) [@Bill\_McConaghy](https://discuss.elastic.co/u/Bill_McConaghy)
#### Post date: [March 16, 2018, 1:39pm UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840/4 "2018-03-16T13:39:16Z")

</div>

I would look at the documentation on analyzers: [https://www.elastic.co/guide/en/elasticsearch/reference/current/analyzer.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/analyzer.html)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 13, 2018, 1:39pm UTC](https://discuss.elastic.co/t/kibana-regex-contains/123840/5 "2018-04-13T13:39:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
