Closed ghost closed 10 years ago
Searches using "tags == " bring back no results using Multies.
Apr 15 16:24:23 server01 moloch-mviewer: sessions.json query {"from":"0","size":100,"query":{"filtered":{"query":{"range":{"lp":{"from":1397575455}}},"filter":{"term":{"ta":"protocol:dns"}}}},"facets":{"dbHisto":{"histogram":{"key_field":"lp","value_field":"db","interval":60,"size":1440}},"paHisto":{"histogram":{"key_field":"lp","value_field":"pa","interval":60,"size":1440}},"map1":{"terms":{"field":"g1","size":1000}},"map2":{"terms":{"field":"g2","size":1000}}},"sort":[{"fp":{"order":"asc"}},{"fpd":{"order":"asc"}}],"fields":["pr","ro","db","fp","lp","a1","p1","a2","p2","pa","by","no","us","g1","g2","esub","esrc","edst","efn","dnsho","tls","ircch"]}
Need to do viewer regression scripts like I have for capture :)
You said you hated that!
i hate everything
Searches using "tags == " bring back no results using Multies.
Apr 15 16:24:23 server01 moloch-mviewer: sessions.json query {"from":"0","size":100,"query":{"filtered":{"query":{"range":{"lp":{"from":1397575455}}},"filter":{"term":{"ta":"protocol:dns"}}}},"facets":{"dbHisto":{"histogram":{"key_field":"lp","value_field":"db","interval":60,"size":1440}},"paHisto":{"histogram":{"key_field":"lp","value_field":"pa","interval":60,"size":1440}},"map1":{"terms":{"field":"g1","size":1000}},"map2":{"terms":{"field":"g2","size":1000}}},"sort":[{"fp":{"order":"asc"}},{"fpd":{"order":"asc"}}],"fields":["pr","ro","db","fp","lp","a1","p1","a2","p2","pa","by","no","us","g1","g2","esub","esrc","edst","efn","dnsho","tls","ircch"]}