Kibana: Case-insensitive display of data

Question

Is there a way for Kibana to only display data once for both lowercase and uppercase matches?

For example, say I need a pie chart of exceptions, I would not want both "BusinessException" and "businessexception" to be displayed and to be considered different.

I can only think of it as you type inside the query of kibana BusinessException AND businessexception For filtering u can do that but not for query. — Fizzo, Jan 02 '15 at 08:01

score 6 · Answer 1 · edited May 23 '17 at 10:28

6

There's no way to do this with Kibana. However, you can do this at the elasticsearch level with a tokeniser. You'd set up something like this:

$ curl -XPUT localhost:9200/testindex/ -d '
{
  "settings":{
     "index":{
        "analysis":{
           "analyzer":{
              "case_insensitive_analyser":{
                 "tokenizer":"case_insensitive",
                 "filter":"uppercase"
              }
           }
        }
     }
  },
  "mappings":{
     "test":{
        "properties":{
           "exception":{
              "analyzer":"case_insensitive_analyser",
              "type":"string"
           }
        }
     }
  }
}

which I borrowed from this question: How to setup a tokenizer in elasticsearch

edited May 23 '17 at 10:28

Community

1
1

answered Dec 11 '14 at 00:31

bckygldstn

283
2
6

Thank you for your answer. Would setting up a tokeniser at the elasticsearch level prevent Kibana from having multiple displays depending on lowercase/uppercase? – halpsb Dec 17 '14 at 10:32
This is the correct way to go and by far the simplest. – Sébastien Renauld Mar 03 '15 at 11:14

Kibana: Case-insensitive display of data

1 Answers1