Hey, i'm trying to query against a large list, so apposed to copying and pasting data in KQL, and running something
user: ("name","name2","name3")
Is there away of importing that list and making it into a variable? then querying against the variable?
If you've the access and credentials, you could possibly create a script that could do that.
I mention a script because AFAIK, you cant use variables in say Dev Tools.
Although, I've heard that there may be a sql view within Kibana. Perhaps variables are used there.
What version of Kibana are you using @chin1 ?
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.