graylog2-server
graylog2-server copied to clipboard
Prevent saving an Event Definition with Cardinality Aggregation without field specified.
Prevent saving an Event Definition with Cardinality Aggregation without field specified.
Expected Behavior
Field should be mandatory for Cardinality Aggregation.
Current Behavior
You can save an Event Definition with Cardinality Aggregation ... without field specified:
Possible Solution
Better validation, probably both BE and FE.
Steps to Reproduce (for bugs)
- Create or edit event definition.
- Choose:
Create Events for Definition if...->Aggregation of results reaches a threshold - Pick cardinality, but do not choose a field.
- Notice you can save this kind of event definition.
Context
HS-2290625939
Your Environment
- Graylog Version: 5.2.3
Related to https://github.com/Graylog2/graylog2-server/issues/17367