Use OR semantics when filtering events by multiple tags - #27145
Open
danotorrey wants to merge 1 commit into
Open
Use OR semantics when filtering events by multiple tags#27145danotorrey wants to merge 1 commit into
danotorrey wants to merge 1 commit into
Conversation
Selecting more than one tag required an event to carry every selected tag. Every other multi-value filter treats multiple selections as OR, so multiple tags now match events carrying any of the selected values. Cross-attribute filters are still AND'd together. Also move the extraFilters range-prefix parsing out of the storage adapters into MoreSearchAdapter, so the prefix handling lives in one place instead of being copied for each backend. Tags are still unreleased, so this adds the PR to the existing changelog entry for the feature rather than a new one. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
danotorrey
force-pushed
the
feature/tags-filter-or-semantics
branch
from
August 27, 2026 19:51
7a74425 to
faa7576
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Shifts multi-tag filtering from AND to OR, matching every other multi-value filter.
EventsFilterBuilder: tag terms are joined with OREventDefinitionsResource.getPage: tag predicate is "has any of" instead of "has all of"MoreSearchAdapter.parseRangeValue:extraFiltersrange-prefix parsing moved out of the per-backend storage adaptersTags are unreleased, so the PR is appended to that feature's existing changelog entry.
/jpd Graylog2/graylog-plugin-enterprise#15353