-
Notifications
You must be signed in to change notification settings - Fork 8.5k
Closed
Labels
bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experience
Description
When expanding an event in the table view, and then trying to filter by clicking the magnifying glass image next to an @fields event the following error message is received:
Oops! QueryParsingException[[logstash-2013.07.17] Failed to parse query [@fields.syslog_prog:["sudo"]]]
Filtering works fine with the default fields of @message @source_host, ect. It is only with @fields fields that is fails. All @fields values are also arrays, I am not sure if this is related.
@fields.syslog_host = ["hostname"]
@source_host = "hostname"
Metadata
Metadata
Assignees
Labels
bugFixes for quality problems that affect the customer experienceFixes for quality problems that affect the customer experience