Github user justinleet commented on the issue:

    https://github.com/apache/metron/pull/827
  
    For the search, I ran,
    ```
    curl -X POST --header 'Content-Type: application/json' --header 'Accept: 
application/json' -d '{
      "facetFields": [
        "ip_src_addr"
      ],
      "fields": [
        "guid", "ip_src_addr"
      ],
      "from": 0,
      "indices": [
        "bro"
      ],
      "query": "*",
      "size": 5
    }' 'http://node1:8082/api/v1/search/search'
    ```
    
    and returned 
    
    ```
    ...// Search results
      "facetCounts": {
        "ip_src_addr": {
          "192.168.138.158": 5861,
          "192.168.66.1": 2439
        }
      }
    ```
    
    @merrimanr The problem before was that those weren't in string format 
right?  This is what's expected with fix?


---

Reply via email to