Justin Leet created METRON-1323:
-----------------------------------

             Summary: Alerts UI grouping missing intermediate filters
                 Key: METRON-1323
                 URL: https://issues.apache.org/jira/browse/METRON-1323
             Project: Metron
          Issue Type: Bug
            Reporter: Justin Leet
         Attachments: Screen Shot 2017-11-20 at 3.02.11 PM.png

The alerts UI let's you filter by multiple groups and retrieve the results.  
The attached screenshot shows the situation where going from source:type -> 
ip_dst_addr -> ip_src_addr skips the filter on ip_dst_addr, so the retrieved 
alerts are for all ip_dst_addr, instead of the group you're in.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to