# Kibana splits hostname on DOTS

**URL:** <https://discuss.elastic.co/t/kibana-splits-hostname-on-dots/17247>\
**Category:** Elasticsearch\
**Created:** [April 29, 2014, 1:19am UTC](https://discuss.elastic.co/t/kibana-splits-hostname-on-dots/17247 "2014-04-29T01:19:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dkjhanitt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dkjhanitt/32/1575_2.png) [@dkjhanitt](https://discuss.elastic.co/u/dkjhanitt)\
**Post date:** [April 29, 2014, 1:19am UTC](https://discuss.elastic.co/t/kibana-splits-hostname-on-dots/17247/1 "2014-04-29T01:19:22Z")

</div>

Hi,  
I have a n00b question.  
I have a mapping defined as

{  
"_logstash-2014.04.29_" : {  
"mappings" : {  
"_X\_Server_" : {  
"properties" : {  
"@timestamp" : {  
"type" : "date",  
"format" : "dateOptionalTime"  
},  
"@version" : {"type" : "string" },  
"file" : {"type" : "string" },  
_"host" : { "type" : "string"},_  
"message" : {"type" : "string"}  
}  
}  
}  
}

}

In Kibana, I do see that host gets split on dots(".") . I went through  
links, and can see that I have to update the mapping for host index as  
"not\_analyzed".  
I am unable to update the mapping after issuing this command

curl -XPUT '[http://localhost:9200/logstash-2014.04.29\*/X\_server\*/\_mapping](http://localhost:9200/logstash-2014.04.29*/X_server*/_mapping)'  
-d '  
{  
"_X\_server_" : { "properties": { "host" : { "type": "string", "index":  
"not\_analyzed"}}}  
}

Here is the error I am getting

[2014-04-28 18:15:04,043][DEBUG][action.admin.indices.mapping.put] [Node1]  
failed to put mappings on indices [[logstash-2014.04.29]], type [X\_server]  
org.elasticsearch.index.mapper.MergeMappingException: Merge failed with  
failures {[mapper [host] has different index values, mapper [host] has  
different `norms.enabled` values, mapper [host] has different tokenize  
values, mapper [host] has different index\_analyzer]}

Can anyone point me what am I doing wrong ?

Thanks,

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/afce94c3-5fcf-46b7-aaf2-d460186290bd%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/afce94c3-5fcf-46b7-aaf2-d460186290bd%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![brian\_yoder](https://avatars.discourse-cdn.com/v4/letter/b/f1d935/32.png) [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\
**Post date:** [April 29, 2014, 10:39pm UTC](https://discuss.elastic.co/t/kibana-splits-hostname-on-dots/17247/2 "2014-04-29T22:39:42Z")

</div>

You aren't doing anything wrong. Elasticsearch is just telling you that you  
have attempted to change the mapping to one that is not compatible with the  
current mapping.

I believe that the best advice would be to export / snapshot the data, then  
delete and re-add the index with the corrected mapping, and then reload the  
data. Then your existing data along with your new data will all be  
consistently searchable.

Brian

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4eea02ad-3e39-4df9-88c5-59a37eec9779%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4eea02ad-3e39-4df9-88c5-59a37eec9779%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:32am UTC](https://discuss.elastic.co/t/kibana-splits-hostname-on-dots/17247/3 "2017-07-06T01:32:38Z")

</div>