-
Type:
Bug
-
Resolution: Won't Fix
-
Priority:
Low
-
Component/s: Alerts - Query / Results / Filters
-
None
-
Severity 3 - Minor
Issue Summary
Unable to filter failed alert data using filter query 'description: 'failed'.
Please Note: The above filter is not working only when the alert description is contained in curly or square brackets and there should be no space in-between the description content. For example: See alert description as mentioned in Step 1 below.
Steps to Reproduce
- Create an alert having description field with text specified within curly brackets with out any space included For example: {" "OperationName":"Microsoft",Level":"Error","ActivityStatus":"Failed",ActivitySubStatus":",""}
- Try to search alert using filter: description: Failed
Expected Results
Search filter should be able to filter the failed alerts.
Actual Results
Failed alerts are not appearing as a result of search filter query.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available