We have a host field in our logs. Each host has a dash: client-a1234, client-a2345, etc. The raw data and documents panel displays the field correctly. A terms panel does not, it currently displays:
| host |
number |
| client |
10000 (what I assume are all log lines) |
| a1234 |
5000 (what I assume to be the correct number for this host) |
| a2345 |
5000 |
Is there a restriction on the field values?