we have longer hostnames. Like "gateway_chvj500ld800.mycompany.net".
Its truncated to something like "gateway_chvj.....mycompany.net" So the important part is missing.
Same with Timestamps.
How can we eliminate the truncation?
I don't believe there is an easy way to do it, but I might be wrong. I would create a rex and replace for your hostnames when running reports, similar to what is in this Question:
im sure it is in the UI, on the field picker little blue box.
JensT, if you mouse over one of the hosts, or timestamps, you should notice that the timestamp/host is fully there. If you click on one, it will add it correctly to the search query. The truncation is due to the available screen-space as mick points out, and im not sure if there can be done anything against it. I spoke to a UI a while back and seems that is the way it's supposed to be. JV might want to comment on this, if he sees this thread.