This bug extends in impact into the overall dashboard, as a number of fields use expressions such as {dns_name=~"$host"}. Especially when dns_name isn't available on these fields (and thus $host becomes ""), this generates data of limited use - basically everything gets lumped together.
Either we need to always ensure dns_name is present (e.g. stuffing an IP in if DNS names aren't available), or perhaps we need to split on some other identifier?
This bug extends in impact into the overall dashboard, as a number of fields use expressions such as {dns_name= ~"$host" }. Especially when dns_name isn't available on these fields (and thus $host becomes ""), this generates data of limited use - basically everything gets lumped together.
Either we need to always ensure dns_name is present (e.g. stuffing an IP in if DNS names aren't available), or perhaps we need to split on some other identifier?