OR filter with Kibana 5.0

[dav3860]

Hi,
I used to create "bool" filters in Kibana to mimic an "OR". For example see :

OR filter on dashboard in Kibana 4

Since I upgraded to elasticsearch and Kibana 5.0, this doesn't work anymore. I imagine that it's because the bool filter was replaced by a bool query in elasticsearch 5.0 (https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-bool-filter.html). I can't get it to work.

Do you know how I can make an "OR" between two filters in ES/Kibana 5.0 ?

[BigFunger (Jim Unger)]

I was able to modify a filter in 5.0 to achieve an OR filter.
I changed it from a match query to a query_string query. elasticsearch docs

Original Filter:

{
  "query": {
    "match": {
      "geo.dest": {
        "query": "CN",
        "type": "phrase"
      }
    }
  }
}

Or Filter:

{
  "query": {
    "query_string" : {
      "fields" : ["geo.dest"],
      "query" : "IN OR CN"
    }
  }
}

Will that work for you?

[dav3860]

Thank you ! It solved my problem.

[BigFunger (Jim Unger)]

You're welcome!