search

raintank / grafana

Grafana - A Graphite & InfluxDB Dashboard and Graph Editor
http://grafana.org
Other
42 stars 4 forks source link

events stored in new per-day indexes not searchable #546

Closed woodsaj closed 8 years ago

woodsaj commented 8 years ago

The new indexes set all fields to not-analyzed. Due to how the queries are parsed, our regex searches for severity:/ERROR/ do not work as the querystring is converted to lowercase, but due to not being analyzed anymore the term in the document is still uppercase.

https://github.com/elastic/elasticsearch/issues/9973

Should be easily fixable by adding the "lowercase_expanded_terms": false property to the query_string query.