Graylog2 / Graylog2/graylog2-server
"Search for events" on "Alerts & Events" not working as expected (6.2.0)
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
## Expected Behavior
On the "Alerts & Events" page:
* Available search fields should clearly map to the columns shown in the alerts/events table.
* Searching using listed fields should work in a manner consistent with the rest of Graylog.
## Current Behavior
* It's a bit unclear what `title` is referring to, since there isn't a `title`/`Title` column in the alerts/events table.
* `id` seems to be the only field I can get working for a field-based search. For example: `description:NO_LEADER` and `title:"System notification events"` (took a guess on what `title` refers to) don't return any results (despite there being events present).
## Steps to Reproduce (for bugs)
1. Be on `6.2.0` (or presumably newer)
2. Have events like `NO_LEADER: There was no leader Graylog server node detected in the cluster`
3. Navigate to `/alerts`
4. Try various searches on the fields shown in the `Search for events` input's help section
5. Note only `id:$ID` seems to work consistently.
## Context
Trying to understand the new search functionality on the "Alerts & Events" page.
Somewhat related to #22430.
## Your Environment
* Graylog Version: `6.2.0`
Contributor guide
Assessment
This issue has not been assessed yet.