You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Values are a separate process from keywords or fields. They require some sort of querying aggregation done, with a field name also being required. This tests failure points for value suggestion
What to test
Data type:
Index Patterns
Indexes
S3 Connections (future)
Cloudwatch
Security Lake
Language:
DQL
PPL
SQL
Scenario
Steps
Expected result
Notes
Example (See below)
DQL
Put in a field name, the OSD type should be keyword.
Drop a colon after the field name if it isn't already there.
Look for suggestions and verify that they are expected values.
Test a field that isn't of type keyword, to ensure there aren't any suggested values.
Test a partially formed value.
The values should be the top 10 values for the field, using whatever partially formed value there is.
PPL
Form a query in the format `source =
where =. Ensure that the field is in the index and the field is of OSD typekeyword.</li><li>Look for suggestions and verify that they are the expected values.</li><li>Replace the query in step 1 with source =
where in (,and verify the values are as expected.</li><li>Test a field that isn't of typekeyword`, to ensure there aren't any suggested values.
SQL
Form a query in the format SELECT * FROM <table> WHERE <field> = . Ensure that the field is in the index and the field is of OSD type keyword.
Look for suggestions and verify that they are the expected values.
Replace the query in step 1 with SELECT * FROM <table> WHERE <field> IN (, and verify the values are as expected.
Test a field that isn't of type keyword, to ensure there aren't any suggested values.
The values should be the top X values of that field, where X is set in the advanced settings under query:enhancements:suggestValuesLimit.
Pre-requisites
What do we need to make sure the test can be written
Steps to setting up the scenario
Have at least 1 existing workspace with index patterns
Turn query enhancements on
Select the index pattern
Select the language for the test
Ensure query:enhancements:suggestValues is on and query:enhancements:suggestValuesLimit is set properly
Known Issues
List of known issues to reference that could impact the results of this test case
The text was updated successfully, but these errors were encountered:
Objective
Values are a separate process from keywords or fields. They require some sort of querying aggregation done, with a field name also being required. This tests failure points for value suggestion
What to test
Data type:
Index Patterns
Indexes
S3 Connections (future)
Cloudwatch
Security Lake
Language:
DQL
PPL
SQL
keyword
.keyword
, to ensure there aren't any suggested values.. Ensure that the field is in the index and the field is of OSD type
keyword.</li><li>Look for suggestions and verify that they are the expected values.</li><li>Replace the query in step 1 with
source =and verify the values are as expected.</li><li>Test a field that isn't of type
keyword`, to ensure there aren't any suggested values.SELECT * FROM <table> WHERE <field> =
. Ensure that the field is in the index and the field is of OSD typekeyword
.SELECT * FROM <table> WHERE <field> IN (,
and verify the values are as expected.keyword
, to ensure there aren't any suggested values.query:enhancements:suggestValuesLimit
.Pre-requisites
What do we need to make sure the test can be written
Steps to setting up the scenario
Have at least 1 existing workspace with index patterns
Turn query enhancements on
Select the index pattern
Select the language for the test
Ensure
query:enhancements:suggestValues
is on andquery:enhancements:suggestValuesLimit
is set properlyKnown Issues
List of known issues to reference that could impact the results of this test case
The text was updated successfully, but these errors were encountered: