Inspector shows incorrect index pattern

**Describe the bug:**

When using an index filter, the "Index Pattern" that shows up in the inspector is not always accurate.

**Steps to reproduce:**
1. Open Discover
2. In the KQL bar, filter for a specific `_index` without using wildcards (e.g. `_index: logs-2024-06-27`)
3. Open the Inspect panel

**Expected behavior:**

It would show the "Index Pattern" as `logs-2024-06-27`. Instead, it shows `logs-`.

**Screenshots (if relevant):**

![image](https://github.com/elastic/kibana/assets/1178348/21e7f1ef-9ed6-4210-8f35-04e4c23cb05d)

**Any additional context:**

Related: https://github.com/elastic/kibana/pull/136407

I believe this regex needs to be adjusted:

https://github.com/elastic/kibana/blob/6b778cb071fa8b0555f51bc7aa721e1947474b07/src/plugins/data/common/search/search_source/search_source.ts#L1211-L1230

	parseActiveIndexPatternFromQueryString(queryString: string): string[] {
	let m;
	const indexPatternSet: Set<string> = new Set();
	const regex = /\s?(_index)\s?:\s?[\'\"]?(\w+\-?\*?)[\'\"]?\s?(\w+)?/g;

	while ((m = regex.exec(queryString)) !== null) {
	// This is necessary to avoid infinite loops with zero-width matches
	if (m.index === regex.lastIndex) {
	regex.lastIndex++;
	}

	m.forEach((match, groupIndex) => {
	if (groupIndex === 2) {
	indexPatternSet.add(match);
	}
	});
	}

	return [...indexPatternSet];
	}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Inspector shows incorrect index pattern #187103

lukasolson
openedon Jun 27, 2024

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Inspector shows incorrect index pattern #187103

Description

lukasolsonopenedon Jun 27, 2024

Metadata