# Wrong visualize display field

**URL:** <https://discuss.elastic.co/t/wrong-visualize-display-field/50059>\
**Category:** Kibana\
**Created:** [May 14, 2016, 10:18pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059 "2016-05-14T22:18:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Valeriy](https://avatars.discourse-cdn.com/v4/letter/v/5e9695/32.png) [@Valeriy](https://discuss.elastic.co/u/Valeriy)\
**Post date:** [May 14, 2016, 10:18pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/1 "2016-05-14T22:18:46Z")

</div>

I am doing visualization and field hostname signed "analyzed field". What does this mean?  
This field is not on the graph displays full names.  
It must be like this:  
HOME-GW-R1  
HOME-CUCM-PUB

 ![](https://us1.discourse-cdn.com/elastic/original/2X/4/4ad1656ac04e805edf5ab0dc28cc31f2bae072f1.JPG)  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/5/51e18d621c5230943225652d3de58a06a3141caf.JPG)  
How to display the full content of the field hostname?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 16, 2016, 6:44am UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/2 "2016-05-16T06:44:37Z")

</div>

Use the `hostname.raw` field instead.

---

<div class="post-metadata">

**Author:** ![Valeriy](https://avatars.discourse-cdn.com/v4/letter/v/5e9695/32.png) [@Valeriy](https://discuss.elastic.co/u/Valeriy)\
**Post date:** [May 16, 2016, 11:29am UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/3 "2016-05-16T11:29:26Z")

</div>

How can I do it?

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [May 16, 2016, 6:33pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/4 "2016-05-16T18:33:13Z")

</div>

On the left side where you have "Split Bars" and your "Field: hostname". See if you can change that selection to "hostname.raw". And then click the green arrow to apply that change.

---

<div class="post-metadata">

**Author:** ![Valeriy](https://avatars.discourse-cdn.com/v4/letter/v/5e9695/32.png) [@Valeriy](https://discuss.elastic.co/u/Valeriy)\
**Post date:** [May 17, 2016, 7:56pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/5 "2016-05-17T19:56:15Z")

</div>

Field: hostname is not in the selection.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/7/7f3f88c82123b7a7b1e72dbe5e1f8ca2962fa4af.JPG)  
It's not here

---

<div class="post-metadata">

**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\
**Post date:** [July 21, 2016, 5:54pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/6 "2016-07-21T17:54:51Z")

</div>

Hi Valeriy,  
I just found out that I wasn't getting email notifications on these discuss topics. Did you resolve your issue? If not, the solution requires a small change in the Elasticsearch mapping for the host field to include the raw string. The exact change depends on Elasticsearch version you are running.

Regards,  
Lee

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:45pm UTC](https://discuss.elastic.co/t/wrong-visualize-display-field/50059/7 "2017-07-06T13:45:01Z")

</div>