bug(srql): SRQL query builder not working for flows #1080

Open
opened 2026-03-28 04:31:28 +00:00 by mfreeman451 · 0 comments
Owner

Imported from GitHub.

Original GitHub issue: #2962
Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/2962
Original created: 2026-03-01T06:05:09Z


Describe the bug
This SRQL query can’t be fully represented by the builder yet. The builder won’t overwrite your query unless you click “Replace query”.

in:flows src_endpoint_ip:192.168.2.22 dst_endpoint_ip:216.17.46.98 src_endpoint_port:30110 dst_endpoint_port:161 protocol_num:17 time:last_1h bucket:5m agg:sum value_field:bytes_total series:protocol_group limit:4000
Image

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Smartphone (please complete the following information):

  • Device: [e.g. iPhone6]
  • OS: [e.g. iOS8.1]
  • Browser [e.g. stock browser, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

Imported from GitHub. Original GitHub issue: #2962 Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/2962 Original created: 2026-03-01T06:05:09Z --- **Describe the bug** This SRQL query can’t be fully represented by the builder yet. The builder won’t overwrite your query unless you click “Replace query”. ``` in:flows src_endpoint_ip:192.168.2.22 dst_endpoint_ip:216.17.46.98 src_endpoint_port:30110 dst_endpoint_port:161 protocol_num:17 time:last_1h bucket:5m agg:sum value_field:bytes_total series:protocol_group limit:4000 ``` <img width="1229" height="698" alt="Image" src="https://github.com/user-attachments/assets/090c9f0b-9e3c-4578-9f3c-f18331117a4c" /> **To Reproduce** Steps to reproduce the behavior: 1. Go to '...' 2. Click on '....' 3. Scroll down to '....' 4. See error **Expected behavior** A clear and concise description of what you expected to happen. **Screenshots** If applicable, add screenshots to help explain your problem. **Desktop (please complete the following information):** - OS: [e.g. iOS] - Browser [e.g. chrome, safari] - Version [e.g. 22] **Smartphone (please complete the following information):** - Device: [e.g. iPhone6] - OS: [e.g. iOS8.1] - Browser [e.g. stock browser, safari] - Version [e.g. 22] **Additional context** Add any other context about the problem here.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carverauto/serviceradar#1080
No description provided.