Filter query syntax

[Sunil_Khullar]

How to create a filter query for X-Axis aggregation
I know we are supposed to use ES-json syntax. But an example would help
if I have a field called "month" and value "jan"
how do I create a bucket for { "month" : "jan" } ?

[lukas (Lukas Olson)]

You can use the Lucene query syntax (i.e. month: "jan").

It looks like specifying Elasticsearch query DSL is currently broken and I've filed an issue: https://github.com/elastic/kibana/issues/21176

[Sunil_Khullar]

Broken in 6.3? I am using slightly older one 6.2.3!

[Sunil_Khullar]

I tried the suggested syntax. Here is what I get in the saved query? Is this because its broken?

"schema": "segment",
      "params": {
        "filters": [
          {
            "input": {
              "query": "month : \"jan\""
            },
            "label": ""
          },
          {
            "input": {
              "query": "month: \"feb\""
            }
          },

[lukas (Lukas Olson)]

No, that looks correct, are you seeing the correct results in the visualization?

[Sunil_Khullar]

No result in visualization.

[lukas (Lukas Olson)]

Could you take a screenshot that includes the visualization as well as the config for it?

[Sunil_Khullar]

Here it is - the last column is from blank filter

[lukas (Lukas Olson)]

Hmm, could you try it without spaces? e.g. month:"jan"

[Sunil_Khullar]

no lock with space removed too...

[lukas (Lukas Olson)]

Could you show me the JSON from one of the documents?

[Sunil_Khullar]

It worked!
The vales of month were differently coded.