Skip to content

/ graylog2-server

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Quick Values widget: "Add to search query button" has wrong behavior #4216

Closed
lennartkoopmann opened this issue Oct 6, 2017 · 0 comments
Closed

Quick Values widget: "Add to search query button" has wrong behavior #4216

lennartkoopmann opened this issue Oct 6, 2017 · 0 comments
Assignees
@bernd
Labels
bug triaged
Milestone
2.4.0

Comments

@lennartkoopmann
Copy link
Member

@lennartkoopmann lennartkoopmann commented Oct 6, 2017

When building quick values with stacking, the little "Add to search query button" on the right of each row will build a wrong query:

src_addr:"172.30.0.110 - 52.39.140.162"

It should treat the two values as different objects and build:

src_addr:"172.30.0.110" AND dst_addr:"52.39.140.162"
@lennartkoopmann lennartkoopmann added this to the 2.4.0 milestone Oct 6, 2017
@lennartkoopmann lennartkoopmann added the bug label Oct 6, 2017
@lennartkoopmann lennartkoopmann mentioned this issue Oct 10, 2017
Closed
4 of 5 tasks complete
@bernd bernd self-assigned this Oct 10, 2017
@jalogisch jalogisch added the triaged label Oct 16, 2017
bernd added a commit that referenced this issue Oct 23, 2017
@bernd
Return additional field->value mapping for terms queries
Loading status checks…
c391b7c 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
@bernd bernd mentioned this issue Oct 23, 2017
Merged
@ghost ghost added the in progress label Oct 23, 2017
edmundoa added a commit that referenced this issue Oct 25, 2017
@bernd @edmundoa
Return additional field->value mapping for terms queries (#4278)
Loading status checks…
aada4c6 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
@ghost ghost removed the in progress label Oct 25, 2017
edmundoa added a commit that referenced this issue Oct 25, 2017
@bernd @edmundoa
Return additional field->value mapping for terms queries (#4278)
Loading status checks…
d36aa85 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

(cherry picked from commit aada4c6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bernd bernd

Labels
bug triaged
Projects
None yet
Milestone
2.4.0
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants
@bernd @lennartkoopmann @jalogisch