Wrong visualize display field


#1

I am doing visualization and field hostname signed "analyzed field". What does this mean?
This field is not on the graph displays full names.
It must be like this:
HOME-GW-R1
HOME-CUCM-PUB



How to display the full content of the field hostname?


(Mark Walkom) #2

Use the hostname.raw field instead.


#3

How can I do it?


(Lee Drengenberg) #4

On the left side where you have "Split Bars" and your "Field: hostname". See if you can change that selection to "hostname.raw". And then click the green arrow to apply that change.


#5

Field: hostname is not in the selection.


It's not here


(Lee Drengenberg) #6

Hi Valeriy,
I just found out that I wasn't getting email notifications on these discuss topics. Did you resolve your issue? If not, the solution requires a small change in the Elasticsearch mapping for the host field to include the raw string. The exact change depends on Elasticsearch version you are running.

Regards,
Lee


(system) #7