For an index A, the field EventTemplateName value is CustomEvent and this is same for all the documents, and in kibana graphs, its showing in lower case customevent.
Now, I changed my indexing strategy to weekly indexes, and suddenly for the new indexes, it started showing as CustomEvent, in the graph, and it is shown as different group. So, its not being aggregated as it is considered as different group.
But, the actual value in the ES document is always, CustomEvent, So is there any setting I should change in Kibana? or that is something to do with elastic search?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.