diff --git a/src/app/panels/query/editors/lucene.html b/src/app/panels/query/editors/lucene.html new file mode 100644 index 00000000000..e69de29bb2d diff --git a/src/app/panels/query/editors/regex.html b/src/app/panels/query/editors/regex.html new file mode 100644 index 00000000000..e69de29bb2d diff --git a/src/app/panels/query/editors/topN.html b/src/app/panels/query/editors/topN.html new file mode 100644 index 00000000000..71496541906 --- /dev/null +++ b/src/app/panels/query/editors/topN.html @@ -0,0 +1,12 @@ +
diff --git a/src/app/panels/query/help/lucene.html b/src/app/panels/query/help/lucene.html new file mode 100644 index 00000000000..9e860e97d47 --- /dev/null +++ b/src/app/panels/query/help/lucene.html @@ -0,0 +1,30 @@ +The lucene query type uses LUCENE query string syntax to find matching documents or events within Elasticsearch. + +
+ status field contains active
+
status:active
+ title field contains quick or brown
+
title:(quick brown)
+ author field contains the exact phrase "john smith"
+
author:"John Smith"
Wildcard searches can be run on individual terms, using ? to replace
+a single character, and * to replace zero or more characters:
qu?ck bro*+ +
+ Numbers 1..5 +
count:[1 TO 5]
+ Tags between alpha and omega, excluding alpha and omega:
+
tag:{alpha TO omega}+ Numbers from 10 upwards +
count:[10 TO *]
+ab.* will match
+abcd will not match
+
diff --git a/src/app/panels/query/help/topN.html b/src/app/panels/query/help/topN.html
new file mode 100644
index 00000000000..9fc7c3aa8e0
--- /dev/null
+++ b/src/app/panels/query/help/topN.html
@@ -0,0 +1,14 @@
+The topN query uses an Elasticsearch terms facet to find the most common terms in a field and build queries from the result. The topN query uses LUCENE query string syntax
+
+
extension:"html" AND (user:B.Awesome)
+