Explorer Lucene

The explorer dashboard for Lucene queries allows running ad-hoc queries using an interactive interface.

In addition to running ad-hoc queries, the dashboard shows the Lucene query run after parsing and the ad-hoc version of the command. The Save button creates a saved query based on the provided values. To explore saved queries, the stored values are loaded by selecting the query in the drop down.

Examples

Get weblog from kibana_sample_data_logs for the last 30days with ip= and status=200

• Query: ad-hoc explorer
• Instance: the required instnace
• Use Timestamp: true
• Timestamp Field: timestamp
• Replacements: $ip$=223.87.60.27,$response$=200
• Query: index:kibana_sample_data_logs AND ip:$ip$ AND response:$response$