Open
Description
Objective
Values are a separate process from keywords or fields. They require some sort of querying aggregation done, with a field name also being required. This tests failure points for value suggestion
What to test
Data type:
Index Patterns
Indexes
S3 Connections (future)
Cloudwatch
Security Lake
Language:
DQL
PPL
SQL
Scenario | Steps | Expected result | Notes |
---|---|---|---|
Example (See below) | |||
DQL |
|
|
|
PPL |
|
where =. Ensure that the field is in the index and the field is of OSD type keyword.</li><li>Look for suggestions and verify that they are the expected values.</li><li>Replace the query in step 1 with source = |
where in (,and verify the values are as expected.</li><li>Test a field that isn't of type keyword`, to ensure there aren't any suggested values. |
SQL |
|
|
Pre-requisites
What do we need to make sure the test can be written
Steps to setting up the scenario
Have at least 1 existing workspace with index patterns
Turn query enhancements on
Select the index pattern
Select the language for the test
Ensure
query:enhancements:suggestValues
is on andquery:enhancements:suggestValuesLimit
is set properly
Known Issues
List of known issues to reference that could impact the results of this test case
Metadata
Metadata
Assignees
Type
Projects
Status
In Progress