Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Quick Values widget: "Add to search query button" has wrong behavior #4216

Closed
lennartkoopmann opened this issue Oct 6, 2017 · 0 comments
Closed

Quick Values widget: "Add to search query button" has wrong behavior #4216

lennartkoopmann opened this issue Oct 6, 2017 · 0 comments
Assignees
@bernd
Labels
bug triaged
Milestone
2.4.0

Comments

@lennartkoopmann
Copy link
Contributor

When building quick values with stacking, the little "Add to search query button" on the right of each row will build a wrong query:

src_addr:"172.30.0.110 - 52.39.140.162"

It should treat the two values as different objects and build:

src_addr:"172.30.0.110" AND dst_addr:"52.39.140.162"
@lennartkoopmann lennartkoopmann added this to the 2.4.0 milestone Oct 6, 2017
@lennartkoopmann lennartkoopmann mentioned this issue Oct 10, 2017
Closed
5 tasks
@bernd bernd self-assigned this Oct 10, 2017
bernd added a commit that referenced this issue Oct 23, 2017
@bernd
Return additional field->value mapping for terms queries
c391b7c 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
@bernd bernd mentioned this issue Oct 23, 2017
Merged
@ghost ghost added the in progress label Oct 23, 2017
edmundoa pushed a commit that referenced this issue Oct 25, 2017
@bernd @edmundoa
Return additional field->value mapping for terms queries (#4278)
aada4c6 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216
@ghost ghost removed the in progress label Oct 25, 2017
edmundoa pushed a commit that referenced this issue Oct 25, 2017
@bernd
Return additional field->value mapping for terms queries (#4278)
d36aa85 
This mapping can be used to construct correct ES queries when using
the QuickValues widget with stacked fields.

Fixes #4216

(cherry picked from commit aada4c6)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bernd bernd

Labels
bug triaged
Projects
None yet
Milestone
2.4.0
Development

No branches or pull requests
3 participants
@bernd @lennartkoopmann @jalogisch