Binh, First let me thank you for helping me track down what’s going on here.
So I can confirm that everything I see is the same as what you saw (with the exception that at the end of the Kibana version mine says [master]). If I enter a query for: querystring must query : action:connect …then the expected results come back. Try this now: Go to your logstash dashboard and click one of the rows. Click the magnifying glass near one of the fields and see if you get back results. The above is how my users are the primary way that my users add filters to find what they’re looking for, and that’s the part that isn’t working for me. Thanks, Chris -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/etPan.52fe5cf3.79e2a9e3.e8%40april.sos.its.psu.edu. For more options, visit https://groups.google.com/groups/opt_out.