Kibana: Kibana6 - search bar & query features - strange work

[maxozerov]

Kibana version:
6.6.2

Elasticsearch version:
Version: 6.6.2, Build: default/deb/3bd3e59/2019-03-06T15:16:26.864148Z, JVM: 1.8.0_201

ES Plugins installed:
ingest-geoip

Server JVM version:
java version "1.8.0_201"

Server OS version:
Ubuntu 16.04.6 LTS
Linux 4.4.0-116-generic #140-Ubuntu x86_64 GNU/Linux

Browser version:
"Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36"

Browser OS version:
Win 8.1 Build 9600

Original install method (e.g. download page, yum, from source, etc.):
https://artifacts.elastic.co/packages/6.x/apt

Describe the bug:
Search in the search bar does not work - until the option is turned on/off
_Options: "Turn on query features"._

Steps to reproduce:

Search in the _search bar_ does not work - until the option is turned on or off
Options: "Turn on query features"

_Change Settings (Kibana): Management -> Advanced Setting -> search: queryLanguage - did not bring results._ (Lucene or kuery)

For example:

• search keyId: "Test", or just "Test" from search bar in Dashboard - is not successfull!
  No Results.
  Dashboard (Visualize - Linked to Saved Search with pattern "Exception")
  So, View query Request (in Kibana, its not full request, just part):

{
    "query_string": {
        "query": "\"Exception\"",
        "analyze_wildcard": true,
        "default_field": "*"
    }
}

• Next, turn on "Turn on query features"
  the search now is successfully all searched and highlighted.
  And Request now with filter (all ok!) (in Kibana, its not full request, just part - now added filter)

{
    "filter": [{
        "bool": {
            "should": [{
                "match_phrase": {
                    "keyId": "Test"
                }
            }]
        }
    }]
}

• Next, turn off "Turn on query features"
  everything is still ok - everything works:
  keyId: "Test" or just "Test" is successfully searched and highlighted.
  Request now is:

{
    "query": {
        "bool": {
            "must": [{
                    "query_string": {
                        "query": "keyId: \"Test\"",
                        "analyze_wildcard": true,
                        "default_field": "*"
                    }
                },
                {
                    "query_string": {
                        "query": "\"Exception\"",
                        "analyze_wildcard": true,
                        "default_field": "*"
                    }
                }
            ]
        }
    }
}

So, all works until close browser.
If open the new browser window - it does not work again (after reopen)
Request does not contain keyId: "Test"
You have to turn on "Turn on query features" again (or turn on and then at once turn option off) - search works! ... and so on in a circle.

[elasticmachine]

Pinging @elastic/kibana-app

[timroes]

Thanks for the report and the detailed explanation. cc @Bargs @TinaHeiligers could we check if we can reproduce this?

[Bargs]

@maxozerov I wasn't able to reproduce the issue. I tried creating a saved dashboard. I closed my browser and re-opened it, then loaded the saved dashboard. The query bar worked the first time, without toggling the "turn on query features" opt in. Am I following your steps correctly?

Best would be if you could provide a small sample data set and dashboard which exhibits the problem so we can reproduce.

[maxozerov]

@Bargs We did not wait, and... the reindex was executed (a lot of unnecessary fields were removed) + updated (Elastic and Kibana) to version 6.7.1. As a result, the problem is no longer reproduced.
If something like that happens - I will collect sample data set and dashboard. Anyway, thanks!

[Bargs]

Thanks for following up!