Full-Text Search in Visualization-Filter?


we created and saved quite a bit of visualizations in the new shiny kibana4 and we came to the point where clicking through all the rows when opening a visualization is quite an effort, so we tried using the filter mechanism that kibana4 provide to access the visualizations easier.

Our small problem:

i.e. we saved an visualization as "Windows_ServiceInstallations" or "Linux_RootAccesses" , if we type in "Service" in the filter string of the visualizations, the windows one unfortunately dont appear.

We found out that the _ in the name of it, is interpreted as some sort of delimiter for the filterstring - if we name it Windows-ServiceInstallations, the filter find it.

As already said we quite a bit of the visualizations and renaming everyone if it would be quite an big effort - is there anything we can tweak in Kibana4 to enable the filter to find our visualizations without renaming it?

Thanks for any response.

Probably because we let ES analyse that field, which is both good and bad.

I'll raise a GH issue to see what we can do :slight_smile:

https://github.com/elastic/kibana/issues/4563, let's see what the team reckons.

Thanks Mark, for taking time and creating the github issue!