Timelion and the analyze_wildcard query parameter

Elastic Stack Kibana
1

I've been struggling with timelion all morning.

When I do a query based on a wildcard (which is normal if you use the 'free text' searchbar in Kibana) I get the "analyze_wildcard": true set for the query string. How do I do this for Timelion?

Thanks!

Robert

2

Worked it out, my query was too specific.
q='kubernetes.container.name=customer-dienst AND "POST /public/account/create 200*" AND kubernetes.namespace=gb-brand-production'

I had q='kubernetes.container.name=customer-dienst AND message="POST /public/account/create 200*" AND kubernetes.namespace=gb-brand-production' before.
Worked a treat.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.