I'm configuring logstash search and using Kibana 3, either embedded or
separate, to view the events. With Kibana 2, the default was to have a *
in the search box and all events were shown. With Kibana 3, I get nothing.
Originally I've disabled the _all field. Even when I've enabled it again,
I see nothing on an empty query. A single-word query also brings nothing.
The original events have a message field which contains everything, so
when I say message:xyz, I do get back all the events with xyz. I've set "index.query.default_field":
"message" still to no avail. How does Kibana 3 interpret a seqrch query
without the field prefix, and how do I enable it to work again?
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firstname.lastname@example.org.
For more options, visit https://groups.google.com/groups/opt_out.