Skip to content

Oops! QueryParsingException #228

@p8952

Description

@p8952

When expanding an event in the table view, and then trying to filter by clicking the magnifying glass image next to an @fields event the following error message is received:

Oops! QueryParsingException[[logstash-2013.07.17] Failed to parse query [@fields.syslog_prog:["sudo"]]]

Filtering works fine with the default fields of @message @source_host, ect. It is only with @fields fields that is fails. All @fields values are also arrays, I am not sure if this is related.

@fields.syslog_host = ["hostname"]
@source_host = "hostname"

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugFixes for quality problems that affect the customer experience

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions