Filter query syntax

Elastic Stack Kibana
1

How to create a filter query for X-Axis aggregation
I know we are supposed to use ES-json syntax. But an example would help
if I have a field called "month" and value "jan"
how do I create a bucket for { "month" : "jan" } ?

2

You can use the Lucene query syntax (i.e. month: "jan").

It looks like specifying Elasticsearch query DSL is currently broken and I've filed an issue: https://github.com/elastic/kibana/issues/21176

3

Broken in 6.3? I am using slightly older one 6.2.3!

4

I tried the suggested syntax. Here is what I get in the saved query? Is this because its broken?

"schema": "segment",
      "params": {
        "filters": [
          {
            "input": {
              "query": "month : \"jan\""
            },
            "label": ""
          },
          {
            "input": {
              "query": "month: \"feb\""
            }
          },
5

No, that looks correct, are you seeing the correct results in the visualization?

6

No result in visualization.

7

Could you take a screenshot that includes the visualization as well as the config for it?

8

Here it is - the last column is from blank filter

filter

9

Hmm, could you try it without spaces? e.g. month:"jan"

10

no lock with space removed too...

image
image.png951×509 15.2 KB

11

Could you show me the JSON from one of the documents?

12

It worked!
The vales of month were differently coded.

filters
filters.png1233×474 20.3 KB

13

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.