Graylog2 / Graylog2/graylog2-server

"Search for events" on "Alerts & Events" not working as expected (6.2.0)

Open
#22,432 1 comment 0 reactions 1 assignee Claimed by @janheise View on GitHub
bug triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Expected Behavior

On the "Alerts & Events" page:
* Available search fields should clearly map to the columns shown in the alerts/events table.
* Searching using listed fields should work in a manner consistent with the rest of Graylog.

## Current Behavior

* It's a bit unclear what `title` is referring to, since there isn't a `title`/`Title` column in the alerts/events table.
* `id` seems to be the only field I can get working for a field-based search. For example: `description:NO_LEADER` and `title:"System notification events"` (took a guess on what `title` refers to) don't return any results (despite there being events present).

## Steps to Reproduce (for bugs)

1. Be on `6.2.0` (or presumably newer)
2. Have events like `NO_LEADER: There was no leader Graylog server node detected in the cluster`
3. Navigate to `/alerts`
4. Try various searches on the fields shown in the `Search for events` input's help section
5. Note only `id:$ID` seems to work consistently.

## Context

Trying to understand the new search functionality on the "Alerts & Events" page.

Somewhat related to #22430.

## Your Environment

* Graylog Version: `6.2.0`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.