Converting Search Query To Filter

Elastic Stack Kibana
1

I have a query I've built in the search menu I'd like to convert into a filter, if it's possible. I've tried it but I end up getting an error where it expects the end of the query but gets more. Below is my current query, the point of this is that, 1. I've read that filters are faster than search bar queries and 2. This is for a dashboard that is user facing and filters are more presentable, in my opion, than a search bar query.

edge.timestamp_start >= 1234567890 and (client.request.host: ("www.domain.com" or "domain.com") and client.request.uri: "/covid-19") or client.request.host: ("www.domain2.com" or "domain2.com")
2

Hi Walker

Which error did you receive? You should take a look of the AND OR combinations here. Do I understand correctly that you're building a Filter with query DSL? Like this?

Discover_-_Kibana
Discover_-_Kibana1556×1766 236 KB

Best,
Matthias

3

Yes, that is how I am trying to build the query. In your example, after the closing bracket on query string, I am placing a comma, new line, then opening bracket to next search parameter.

4

Could you share the error that is thrown?
Thx!