/graylog2-server

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Quick Values widget: "Add to search query button" has wrong behavior #4216

Closed
lennartkoopmann opened this Issue Oct 6, 2017 · 0 comments

Comments

Assignees

@bernd bernd

Labels
Projects
None yet
Milestone
  2.4.0
3 participants
@lennartkoopmann @bernd @jalogisch
@lennartkoopmann
Member

lennartkoopmann commented Oct 6, 2017

When building quick values with stacking, the little "Add to search query button" on the right of each row will build a wrong query:

src_addr:"172.30.0.110 - 52.39.140.162"

It should treat the two values as different objects and build:

src_addr:"172.30.0.110" AND dst_addr:"52.39.140.162"

@lennartkoopmann lennartkoopmann added this to the 2.4.0 milestone Oct 6, 2017

@lennartkoopmann lennartkoopmann added the bug label Oct 6, 2017

@lennartkoopmann lennartkoopmann referenced this issue Oct 10, 2017

Closed

Quick Values improvements #4082

4 of 5 tasks complete

@bernd bernd self-assigned this Oct 10, 2017

@jalogisch jalogisch added the triaged label Oct 16, 2017

bernd added a commit that referenced this issue Oct 23, 2017

@bernd
Return additional field->value mapping for terms queries 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
Loading status checks…
c391b7c

@bernd bernd referenced this issue Oct 23, 2017

Merged

Return additional field->value mapping for terms queries #4278

@wafflebot wafflebot bot added the in progress label Oct 23, 2017

@edmundoa edmundoa closed this in #4278 Oct 25, 2017

edmundoa added a commit that referenced this issue Oct 25, 2017

@bernd @edmundoa
Return additional field->value mapping for terms queries (#4278) 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
Loading status checks…
aada4c6

@wafflebot wafflebot bot removed the in progress label Oct 25, 2017

edmundoa added a commit that referenced this issue Oct 25, 2017

@bernd @edmundoa
Return additional field->value mapping for terms queries (#4278) 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

(cherry picked from commit aada4c6)
Loading status checks…
d36aa85
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment