# Kibana visualizations splitting fields with dashes in them with index name other than logstash-\*

**URL:** https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365
**Category:** Kibana
**Created:** [March 14, 2016, 8:17pm UTC](https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365 "2016-03-14T20:17:37Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Madhuri\_Vemuri](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@Madhuri\_Vemuri](https://discuss.elastic.co/u/Madhuri_Vemuri)
#### Post date: [March 14, 2016, 8:17pm UTC](https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365/1 "2016-03-14T20:17:37Z")

</div>

I used the templates to get rid of the field name splitting ... It worked for the indices with the name logstash-\*.  
But i have a different name and hence it is not working  
Is there any other solution.... I am using Kibana 4.1.5 , ElasticSearch-1.7.2, Logstash 2.1.2

my template is something like below  
--where 'local1' is my index name and 'data.projectName' is my field name.  
{  
"template" : "local1",  
"mappings" : {  
"_default_" : {  
"data": {  
"properties":{  
"projectName":{"type":"string", "index":"not\_analyzed"},  
}  
}  
}  
}  
}

---

<div class="post-metadata">

### Author: ![anhlqn](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anhlqn/32/5454_2.png) [@anhlqn](https://discuss.elastic.co/u/anhlqn)
#### Post date: [March 14, 2016, 10:09pm UTC](https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365/2 "2016-03-14T22:09:28Z")

</div>

Can you pull the current mapping of your index by executing:

```auto
GET local1/_mapping

```

If you see split strings in your field data, it is most likely that the field is analyzed.

---

<div class="post-metadata">

### Author: ![Madhuri\_Vemuri](https://avatars.discourse-cdn.com/v4/letter/m/a87d85/32.png) [@Madhuri\_Vemuri](https://discuss.elastic.co/u/Madhuri_Vemuri)
#### Post date: [March 15, 2016, 12:29pm UTC](https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365/3 "2016-03-15T12:29:57Z")

</div>

Sorry, my template was wrong.... i got it when I used the below one

{  
"template" : "local1",  
"mappings" : {  
"_default_" : {  
"\_all" : {"enabled" : true},  
"dynamic\_templates" : [ {  
"string\_fields" : {  
"match" : "\*",  
"match\_mapping\_type" : "string",  
"mapping" : {  
"type" : "string", "index" : "analyzed", "omit\_norms" : true,  
"fields" : {  
"raw" : {"type": "string", "index" : "not\_analyzed"}  
}  
}  
}  
} ]

}  
}  
}

this creates the .raw fields for all the strings fields.... 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:59pm UTC](https://discuss.elastic.co/t/kibana-visualizations-splitting-fields-with-dashes-in-them-with-index-name-other-than-logstash/44365/4 "2017-07-06T13:59:05Z")

</div>


