Using a double quote (") in the 'Alerts & Events' search box throws an error - Githubissues

Graylog2 / graylog2-server

Free and open log management

https://www.graylog.org

Other

7.37k stars 1.06k forks source link

Using a double quote (") in the 'Alerts & Events' search box throws an error #20637

Open drewmiranda-gl opened 2 weeks ago

drewmiranda-gl commented 2 weeks ago

Using a double quote (") in the 'Alerts & Events' search box throws an error

XHR response:

{"type":"ApiError","message":"Unable to perform search query"}

Expected Behavior

An error is not thrown when using a double quote in search

Current Behavior

Error is thrown

Possible Solution

Steps to Reproduce (for bugs)

1. 2. 3. 4.

Context

Your Environment

Graylog Version: 6.0.7
Java Version: Bundled
OpenSearch Version: 2.0.15
MongoDB Version: 7.0.14
Operating System: Ubuntu 22.04 LTS
Browser version: Google Chrome Version 129.0.6668.72 (Official Build) (arm64)

Please let me know if there are any questions

drewmiranda-gl commented 2 weeks ago

Not sure if related to https://github.com/Graylog2/graylog2-server/issues/15260 in the sense that the search term does not do partial matching without the use of *

Typically one would need enclose the search term in double quotes, for example, when searching pipeline rules. This search box does not behave this way and behaves in an unexpected manner.