Define OR instead of AND

Plugins Security Analytics
1

I defined a correlation rule and between fields I only see AND‌ keyword, How can I use OR between fields?

2

Hi @m_pahlevanzadeh,

Could you please clarify where you would like to use the OR ?

3

In Corroletion queries, When I add fields, I see AND.

4

Hi @m_pahlevanzadeh ,

Currently, there is no option in OpenSearch Dashboards to use OR operator:

image
image1348×1488 127 KB

Please create a feature request for this in GitHub:

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.