Skip to content

Add search query preview extension point for event definitions#26557

Closed
danotorrey wants to merge 3 commits into
masterfrom
feat/14552-effective-query-backend
Closed

Add search query preview extension point for event definitions#26557
danotorrey wants to merge 3 commits into
masterfrom
feat/14552-effective-query-backend

Conversation

@danotorrey

@danotorrey danotorrey commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Adds a generic extension point — eventDefinitions.components.searchQueryPreview — beneath the Search Query on the Filter & Aggregation event definition condition screen. FilterForm renders any registered plugin component with the current base query and applied search filters.

This is the OSS-side hook for the enterprise effective-query preview (Graylog2/graylog-plugin-enterprise#14718). The preview itself lives in the enterprise plugin, since search filters are an enterprise feature; OSS only provides the mount point.

Assisted with Claude Code

danotorrey and others added 3 commits July 2, 2026 14:09
Adds a read-only effective-query preview under the Search Query on the
Filter & Aggregation event definition condition screen, with a persisted
show/hide toggle and copy-to-clipboard.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The event-definitions SearchFilter type requires id, title, disabled and
negation; the test fixture was missing them (caught by the tsgo compiler in CI).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Search filters are enterprise-only, so the effective-query preview is now
provided by the enterprise plugin. OSS only exposes a generic
eventDefinitions.components.searchQueryPreview extension point beneath the
Search Query on the event definition condition screen; the read-only field
and toggle move to the enterprise plugin.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@danotorrey danotorrey changed the title Show effective query on event definition condition screen Add search query preview extension point for event definitions Jul 2, 2026
@danotorrey

Copy link
Copy Markdown
Contributor Author

Closing — the effective-query capability is shipping as a backend-only endpoint in Graylog2/graylog-plugin-enterprise#14718, which needs no graylog2-server change.

@danotorrey danotorrey closed this Jul 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant