When using Discover, I can type simple queries such as 'filetype: "server-status"' and Kibana (I assume) is converting that into an actual query that Elasticsearch will respond to. In Machine Learning I want to run a job against the population of events that have 'filetype: "server-status"', but ML requires a proper query. Is there a way to see the query Kibana ran, so that I can copy and paste it into the job datafeed, and not learn the ins and outs of Query DSL 
Click the up caret in the lower left corner of the date histogram. Open the request tab. This is the request that was sent to ElasticSearch. The query bar is a lucene query and has been put into the request as a query_string.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.