anandsubbu edited a comment on issue #1443: METRON-2150: [UI] User not able to filter by multiple values of the same field on Alerts UI URL: https://github.com/apache/metron/pull/1443#issuecomment-506692482 When testing this PR, I observed one case that does not behave as expected. When a new alert is generated, the `alert_status` field is not set, but the default status is shown as 'NEW' in the UI. Attempting a filter on alerts without the field not being set does not hence yield the desired result. So the following filter: ``` alert_status:(NEW OR OPEN) ``` will not display alerts which have their default status (i.e. `NEW`) set during creation time. However, if one manually set the status of an alert to `NEW` (e.g. switch from `NEW` (default) -> `OPEN` -> `NEW`), then the query works fine. I have created [METRON-2167](https://issues.apache.org/jira/browse/METRON-2167) to track this issue separately.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services
