New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Quick Values widget: "Add to search query button" has wrong behavior #4216

Closed
lennartkoopmann opened this Issue Oct 6, 2017 · 0 comments

Comments

Projects
None yet
3 participants
@lennartkoopmann
Member

lennartkoopmann commented Oct 6, 2017

When building quick values with stacking, the little "Add to search query button" on the right of each row will build a wrong query:

src_addr:"172.30.0.110 - 52.39.140.162"

It should treat the two values as different objects and build:

src_addr:"172.30.0.110" AND dst_addr:"52.39.140.162"

@lennartkoopmann lennartkoopmann added this to the 2.4.0 milestone Oct 6, 2017

@lennartkoopmann lennartkoopmann added the bug label Oct 6, 2017

@lennartkoopmann lennartkoopmann referenced this issue Oct 10, 2017

Closed

Quick Values improvements #4082

4 of 5 tasks complete

@bernd bernd self-assigned this Oct 10, 2017

@jalogisch jalogisch added the triaged label Oct 16, 2017

bernd added a commit that referenced this issue Oct 23, 2017

Return additional field->value mapping for terms queries
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

@wafflebot wafflebot bot added the in progress label Oct 23, 2017

edmundoa added a commit that referenced this issue Oct 25, 2017

Return additional field->value mapping for terms queries (#4278)
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

@wafflebot wafflebot bot removed the in progress label Oct 25, 2017

edmundoa added a commit that referenced this issue Oct 25, 2017

Return additional field->value mapping for terms queries (#4278)
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

(cherry picked from commit aada4c6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment