Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Filtering doesn't work on sub-fields in PPL #1850

Closed
A-Gray-Cat opened this issue Aug 1, 2024 · 0 comments
Closed

[BUG] Filtering doesn't work on sub-fields in PPL #1850

A-Gray-Cat opened this issue Aug 1, 2024 · 0 comments
Labels
bug Something isn't working untriaged

Comments

@A-Gray-Cat
Copy link

A-Gray-Cat commented Aug 1, 2024

What is the bug?
Filtering on sub-fields don’t work, as return results include log lines that don’t match the criteria. For example, I specified that I only want to see the logs where api.operation = 'GetBucketAcl', but got logs returned that don’t match that criteria.

How can one reproduce the bug?
Steps to reproduce the behavior:

  1. Go to Data sources -> securitylake -> query data -> open log explorer
  2. Run the follow queries:
source = securitylake.amazon_security_lake_glue_db_us_east_1.amazon_security_lake_table_us_east_1_cloud_trail_mgmt_2_0
| where time_dt > '2024-07-31 00:00:00' and region = 'us-east-1' and api.operation = 'GetBucketAcl'
| head 10

What is the expected behavior?
Only the logs that satisfy the filters are returned

What is your host/environment?

  • OS: [e.g. iOS]
  • Version 2.13
  • Plugins

Do you have any screenshots?
If applicable, add screenshots to help explain your problem.

Do you have any additional context?
Add any other context about the problem.

@A-Gray-Cat A-Gray-Cat added bug Something isn't working untriaged labels Aug 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged
Projects
None yet
Development

No branches or pull requests

1 participant