I'm having trouble finding out how to use split series properly.
From my logs, I gather the fields geoip.country_name and geoip.region_name (using the geoip filter plugin in Logstash).
Now, I wanna display a bar chart with the Count of logs for each Region/City grouped by Country.
I selected the Top 5 Countries and the Top 5 Cities.
So far, I am able to get the following chart:
As you can see, Kibana does select the top 5 cities for each of the top 5 countries as intended. Yet, the X-Axis shows empty blank space for each Country (which corresponds to the top 5 cities from the other countries).
How can I eliminate that empty blank space and show only the top 5 cities for each of the countries?
Even better, can Kibana automatically relate the country to the city? That is, can I display all cities for each country (not only the top 5 cities)?