Queried values are case sensitive

Grafana Elasticsearch
1

Hello,

I am using Grafana with ELK. I have configured winlogbeat in ELK to store events. My problem is that sometime, windows store username with capitals and sometimes not. You can see user Administrator and administrator. it is the same account but due to capitals A grafana see this as diferent. Is it possible to handle somehow case sensitivy? To turn it off?

Example can be Variable definition:

Query: {“find”: “terms”, “field”: “event_data.TargetUserName.keyword”}
RegEx: /^(?!DWM|.*$|-)/

Return:
All, Administrator, administrator…

Thanks

Caspi

2

Maybe this would help: https://www.codementor.io/mehuljain/case-insensitive-exact-matches-in-elasticsearch-nny7ii7fw