[Feature request] Wildcard search on not_analyzed fields for Elasticsearch datasource

[mbraeger]

Grafana version: 4.1.1
Datasource: Elasticsearch - Native Plugin v. 3.0.0
OS: linux

Problem

With the current Elasticseach datasource plugin it is not possible to use wildcards in the Lucene query for not_analyzed fields. This concerns at least Elasticsearch version 2.3.

The reason is that the current query_string created by the plugin is not specifying lowercase_expanded_terms: false

Lucene query example

computer:cs-ccr-*

Resolution

The problem can easily be fixed by adding to query_buider.js the missing query_string option

See also Elasticsearch documentation:
https://www.elastic.co/guide/en/elasticsearch/reference/2.3/query-dsl-query-string-query.html

[mbraeger]

I have a patch ready, if you are interested.

[lpic10]

I can see this option was removed on Elasticsearch 5.x, do you know what is the behavior in it?

[mbraeger]

No, I did not have the time to test the behaviour with Elasticsearch 5.x. We currently still use 2.3, but I will try to make a quick test within the next days.

[cherweg]

I´s only a deprecation:
https://github.com/elastic/elasticsearch/blob/14d2b122a1b91ba14fc13fbb103e553cfddd5778/core/src/main/java/org/elasticsearch/index/query/SimpleQueryStringBuilder.java#L95-L99

I tried to write a feature to configure the query_term options ... take a look :
#7709

regards
Christian

[DvirM]

Hi Guys,

Any updates on this?

[cherweg]

Maybe someone could review my pull request?
It´s a working solution, but not the cleanest or best solution for sure. Perhaps we could make easier to merge.

(If this is the reason not to merge)

regards
christian

[torkelo]

since this option was removed in Elastic 5.x closing this seems appropriate
elastic/elasticsearch#9978