Timeline filter always overwriting first value

Elastic Security SIEM
1

Hi,
I'm having this strange problem (possibly a bug) with timelines in Kibana 8.12.2. When I try to add multiple filters in the timeline builder (the ones under KQL query). The second filter always replaces the first one.

I know that you can put multiple conditions into the one filter, but it would be nice if this could behave the same way as discovery does.

image
image778×346 20.3 KB

2

Hello @j91321

It's fixed in 8.13.0. There are a few other bug fixes related to filtering in Security.
Please refer to:

Please upgrade to at least version 8.13.0 to have it fixed.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.