Graylog2 / Graylog2/graylog2-server

Inverted Stream Rule is not working

Open
#7,253 1 comment 0 reactions 0 assignees View on GitHub
bug triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## Description
Given a user has created a stream and a rule is added as
'Field ipVersion must match exactly 6'
When the user inverts the rule with a not condition eg:
'Field ipVersion must not match exactly 6'
Then the search result is pulling both ipVersion 6 and ipVersion 4.

## Steps To Reproduce
1. Screenshot for ipversion must match exactly 6

![ip6_rule_match](https://user-images.githubusercontent.com/6947168/72938347-70e4f880-3d30-11ea-81ec-c45443ce66bd.png)

2. Screenshot for ipversion must not match exactly 6 yields both version4 and version 6.

![notipv6_rulematch_bug](https://user-images.githubusercontent.com/6947168/72938383-7f331480-3d30-11ea-88be-f0a61ff43407.png)

## Expected Behavior

1. Should return only ipVersion 4 records.

## Environment

- Graylog Version:3.2.0-beta.4-SNAPSHOT
- Elasticsearch Version:
- MongoDB Version:
- Browser Version: chrome

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.