Difference between add a filter and a condition in the search box

Elastic Stack Kibana
1

Hello everyone,

I am new to this forum so I want to apologize in advance if this topic is already discussed.
I was creating a visualization in Kibana and I got two different results when I added a filter vs. I put the same condition in the search box above. Is there a reason for this? Does the two functionality work in two different ways?

P.S I have only learnt how to use to use the Kibana interface recently and don't have any idea how the backed elastic search code works, so if you can provide some solution keeping this in mind that would be really helpful.

Thank you.

2

I'm just wanting to clarify, do you mean when you use the "Add a filter" dialog vs. when you type in the search bar, or when you're using the "filters" bucket aggregation?

What are you typing in the search box and what are you using for the filter?

Thanks!

3

Hey Lucas, I meant "Add a filter" dialog vs. typing that same condition in the search bar.
So for example if I am using country is "USA" in the filter dialog vs. country:"USA" in the search bar, I am getting completely different results. So I was wondering if the two functionalities work differently.

4

If you type country: "USA" in the search bar, this will do a query_string query whereas the filter bar will do a match_phrase.

5

I read through the links but I am a bit confused. Will you be able to explain with this particular example what's the difference?

6

Yeah, can you provide your mapping for that field?

7

Sorry, but what do you mean by mapping?

8

If you go into the Kibana dev tools, do the following:

GET /your_index_name/your_type_name/_mapping

And paste the results in a comment here.

9

"path_url": {
"type": "keyword"
},

Is this what you are looking for?

10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.