Kibana messing graphs with fields containing '/' and '.'

[rikatz]

There is a strange bug on Kibana.

On an environment with Kibana 4.4.0, ES 2.2.0 and so, I'm extracting some Apache Logs using Logstash (with the "COMBINEDAPACHE" grok pattern) directly to ElasticSearch.

While using Kibana, doing a quick discover on the field, the data is returned as expected (as on the following screenshot):

But when doing a simple graph with the values (as a Pie Chart), Kibana understands the values separated by '.' or '/' as different values, and generates a graph with each of those values as a different request:

Thanks

[jimmyjones2]

It's an analysed field - click the yellow warning triangle in your screenshot

[marcinkubica]

How about mapping for that field set to not analyse. ( you will need to
reindex your data )

{ "type": "string", "index": "not_analyzed" }

Sent from Gmail Mobile

[rikatz]

But shouldn't Logstash do this, while creating the new index??

[rashidkpc]

As noted by the comments above, this is not a kibana issue.

[jimmyjones2]

If you're using default logstash settings there should be a request.raw field