# Regex on filtered data on Kibana

**URL:** https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916
**Category:** Kibana
**Created:** [November 15, 2022, 3:25am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916 "2022-11-15T03:25:34Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![Anil\_Alapati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anil_alapati/32/110660_2.png) [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [November 15, 2022, 3:25am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/1 "2022-11-15T03:25:34Z")

</div>

Hi, is there any feature that can add regex and show the data on visualization?  
Like Name is [123@bc.com](mailto:123@bc.com). it should show only 123

---

<div class="post-metadata">

### Author: ![jughosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jughosta/32/107160_2.png) [@jughosta](https://discuss.elastic.co/u/jughosta)
#### Post date: [December 5, 2022, 11:48am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/2 "2022-12-05T11:48:47Z")

</div>

Hi @Anil_Alapati!

There is an option to create a new data view field, define a custom script for it, set a formatter if necessary and use the field later in visualizations.

 ![Screenshot 2022-12-05 at 12.46.49](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e99517b9fdd66594212f8575697ed0e0b9520757.jpeg)  
 ![Screenshot 2022-12-05 at 12.47.07](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e76105b89f6f51ed6bb21697e2b7816d597d6e3b.jpeg)

---

<div class="post-metadata">

### Author: ![Anil\_Alapati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anil_alapati/32/110660_2.png) [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [December 5, 2022, 12:16pm UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/3 "2022-12-05T12:16:39Z")

</div>

Hi,

Thank you. I did that. I can see the truncated string option.

Only problem is I am getting 3 dots extra. Any idea?

Input is [1234567@abcde.com](mailto:1234567@abcde.com)  
Output is 1234567...

---

<div class="post-metadata">

### Author: ![jughosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jughosta/32/107160_2.png) [@jughosta](https://discuss.elastic.co/u/jughosta)
#### Post date: [December 5, 2022, 2:29pm UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/4 "2022-12-05T14:29:48Z")

</div>

I would not recommend using "Truncated string" formatter here as it won't work for other values. Defining a custom script to parse and build a displayed value would be more flexible.

---

<div class="post-metadata">

### Author: ![Anil\_Alapati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anil_alapati/32/110660_2.png) [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [December 5, 2022, 2:42pm UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/5 "2022-12-05T14:42:08Z")

</div>

Sure. Do you have any sample of custom script?

---

<div class="post-metadata">

### Author: ![jughosta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jughosta/32/107160_2.png) [@jughosta](https://discuss.elastic.co/u/jughosta)
#### Post date: [December 6, 2022, 2:21pm UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/6 "2022-12-06T14:21:07Z")

</div>

Hi @Anil_Alapati,

Here is an example how to get only the first part an email (if email field is named as "email", otherwise please adjust):

```auto
def email = doc["email"].value;
if (email != null) {
    int index = email.indexOf('@');
    if (index > 0) {
        emit(email.substring(0, index));
        return;
    }
}
emit("");

```

---

<div class="post-metadata">

### Author: ![Anil\_Alapati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anil_alapati/32/110660_2.png) [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [December 14, 2022, 6:13am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/7 "2022-12-14T06:13:44Z")

</div>

hi,

can i map the newly created filed to the old field available in the Elasticsearch?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 11, 2023, 12:27am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/8 "2023-01-11T00:27:14Z")

</div>



---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 8, 2023, 12:27am UTC](https://discuss.elastic.co/t/regex-on-filtered-data-on-kibana/318916/9 "2023-02-08T00:27:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
