# Query analyzed field

**URL:** <https://discuss.elastic.co/t/query-analyzed-field/55450>\
**Category:** Kibana\
**Created:** [July 13, 2016, 10:12pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450 "2016-07-13T22:12:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [July 13, 2016, 10:12pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450/1 "2016-07-13T22:12:22Z")

</div>

Hi Team,  
I am trying to build a tabular dashboard and need some help for fields that are analyzed ones. is there any way we can set "not\_analyzed" in kibana, or updating index is the only option?

e.g.: if value region="us-east-1" and in tabular dashboard there are three rows like below:  
us  
east  
1

please let me know if need more details.

Regards,

---

<div class="post-metadata">

**Author:** ![Joe\_Fleming](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joe_fleming/32/3561_2.png) [@Joe\_Fleming](https://discuss.elastic.co/u/Joe_Fleming)\
**Post date:** [July 13, 2016, 11:25pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450/2 "2016-07-13T23:25:16Z")

</div>

You can have Elasticsearch create non-analyzed version of fields for you automatically, but existing documents would be missing the non-analyzed version if you didn't reindex. There's no way around it, unfortunately.

Check out [Dynamic Templates](https://www.elastic.co/guide/en/elasticsearch/reference/current/dynamic-templates.html), they allow you to, for example, store any string type field duplicated as a `.raw` version as well, and which is not analyzed. Something like this should do it:

```auto
mappings: {
  'my-index*': {
    dynamic_templates: {
      string_fields : {
        mapping : {
          index : "analyzed",
          omit_norms : true,
          type : "string",
          fields : {
            raw : {
              index : "not_analyzed",
              ignore_above : 256,
              doc_values : true,
              type : "string"
            }
          }
        },
        match : "*",
        match_mapping_type : "string"
      }
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![piyush](https://avatars.discourse-cdn.com/v4/letter/p/ecb155/32.png) [@piyush](https://discuss.elastic.co/u/piyush)\
**Post date:** [July 14, 2016, 4:37pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450/3 "2016-07-14T16:37:34Z")

</div>

Thanks Joe, i will give it a try.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:46pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450/4 "2017-07-06T13:46:42Z")

</div>