From a9470de3ecb86edafbc16df6049ab1fbf1b1bce3 Mon Sep 17 00:00:00 2001 From: mtoffl01 <46911781+mtoffl01@users.noreply.github.com> Date: Tue, 27 Jul 2021 10:09:56 -0400 Subject: [PATCH] log stream widget should query source:iis (#9769) The log stream widget on this dashboard currently queries "iis" but it should query source:iis. Since there is an OOTB integration pipeline for IIS, any formally recognized IIS logs will have the source:iis facet and will not necessarily have "iis" free text in the message attribute of the log. source:iis is a better query. --- iis/assets/dashboards/iis_overview.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/iis/assets/dashboards/iis_overview.json b/iis/assets/dashboards/iis_overview.json index c926ab5d6de8e..9a2bd8bdf1254 100644 --- a/iis/assets/dashboards/iis_overview.json +++ b/iis/assets/dashboards/iis_overview.json @@ -717,7 +717,7 @@ ], "indexes": [], "message_display": "expanded-md", - "query": "\"iis\"", + "query": "source:iis", "show_date_column": true, "show_message_column": true, "sort": { @@ -832,4 +832,4 @@ } } ] -} \ No newline at end of file +}