You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you'd like to search certain fields you can use the `fields` property along with the `simple_query_string`. For example, to only search the `ip` field you could use the following search:
If you'd like to search a specific time range you can do that using normal Elasticsearch JSON search syntax. For example, do search data from the last 365 days you can use the following query assuming your timestamp field is called `timestamp`.
@@ -143,6 +143,17 @@ Maximum number of concurrent search requests (defaults to 10). Integration must
143
143
144
144
Minimum amount of time in milliseconds between each entity search (defaults to 50). Integration must be restarted after changing this option.
145
145
146
+
### Search Term Normalization
147
+
148
+
Normalize the search term by applying a normalization function to the entity. If set, all entities will be normalized. Defaults to "None".
149
+
150
+
Valid options are:
151
+
152
+
* Lowercase the search term
153
+
* Uppercase the search term
154
+
* Search term matches input
155
+
* None - Use Polarity default casing
156
+
146
157
## Installation Instructions
147
158
148
159
Installation instructions for integrations are provided on the [PolarityIO GitHub Page](https://polarityio.github.io/).
Copy file name to clipboardExpand all lines: config/config.json
+31Lines changed: 31 additions & 0 deletions
Original file line number
Diff line number
Diff line change
@@ -210,6 +210,37 @@
210
210
"type": "boolean",
211
211
"userCanEdit": false,
212
212
"adminOnly": true
213
+
},
214
+
{
215
+
"key": "searchTermNormalization",
216
+
"name": "Search Term Normalization",
217
+
"description": "Modify the casing of the search term (i.e., {{ENTITY}}), by applying a normalization function to the entity. If set, all entities will be normalized. Defaults to \"None\".",
0 commit comments