I'd like to know how I can set up a custom query in kibana's discover. My requirement is basically with respect to netflow data that is being stored in the elstic db. I'd like to query:
Show all netflow records where either client_addr is between (...) OR server_addr is between (...)
Adding multiple filters, one for client_addr and one for server_addr in fact seems to do an AND operation. How do I go about having an OR operation?
you can use the "Edit Query DSL" when creating a filter to freely type in any Elasticsearch Query DSL query to use. For an OR query Elasticsearch uses Bool queries with a should key and a minimum_should_match value. Your desired query looks like:
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.