METRON-1626 Alerts UI: An empty result is returned when searching for a single alert contained in a metaalert (sardell via nickwallen) closes apache/metron#1068
Project: http://git-wip-us.apache.org/repos/asf/metron/repo Commit: http://git-wip-us.apache.org/repos/asf/metron/commit/e30f77a0 Tree: http://git-wip-us.apache.org/repos/asf/metron/tree/e30f77a0 Diff: http://git-wip-us.apache.org/repos/asf/metron/diff/e30f77a0 Branch: refs/heads/feature/METRON-1554-pcap-query-panel Commit: e30f77a023983235a0cb835d977f146ee02d8045 Parents: 29d6e90 Author: sardell <sard...@hortonworks.com> Authored: Wed Jun 20 10:52:52 2018 -0400 Committer: nickallen <nickal...@apache.org> Committed: Wed Jun 20 10:52:52 2018 -0400 ---------------------------------------------------------------------- metron-interface/metron-alerts/src/app/model/filter.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/metron/blob/e30f77a0/metron-interface/metron-alerts/src/app/model/filter.ts ---------------------------------------------------------------------- diff --git a/metron-interface/metron-alerts/src/app/model/filter.ts b/metron-interface/metron-alerts/src/app/model/filter.ts index 200e33c..c90c7a6 100644 --- a/metron-interface/metron-alerts/src/app/model/filter.ts +++ b/metron-interface/metron-alerts/src/app/model/filter.ts @@ -63,12 +63,12 @@ export class Filter { private createNestedQuery(field: string, value: string): string { return '(' + Utils.escapeESField(field) + ':' + Utils.escapeESValue(value) + ' OR ' + - Utils.escapeESField('alert.' + field) + ':' + Utils.escapeESValue(value) + ')'; + Utils.escapeESField('metron_alert.' + field) + ':' + Utils.escapeESValue(value) + ')'; } private createNestedQueryWithoutValueEscaping(field: string, value: string): string { return '(' + Utils.escapeESField(field) + ':' + value + ' OR ' + - Utils.escapeESField('alert.' + field) + ':' + value + ')'; + Utils.escapeESField('metron_alert.' + field) + ':' + value + ')'; } }
