Inconsistent results when using logfmt
parser stage with fields
#15190
Labels
type/bug
Somehing is not working as expected
logfmt
parser stage with fields
#15190
Queries that aggregate on extracted labels (
sum by (label_a, label_b)
) return different results when using| logfmt
and| logfmt label_a, label_b
.Example queries:
vs
The second query, where
err
andmsg
are part of thelogfmt
parser stage, is missing theerr
label in the series of the result.When adding another label, which does not even need to exist, to the aggregation, the
err
label becomes part of the series again:The text was updated successfully, but these errors were encountered: