Entity list layout preferences cannot hold two values for the same filter key

Author: patrickmannCreated Sep 15, 2026Updated Sep 15, 2026

A predefined table view cannot filter on two values of the same column. Loading such a view fails. No shipped view does this today, so nothing is broken for users right now, but it blocks building views that need it.

Why

Predefined views are the mechanism behind tabs like "System Alerts" on the Alerts page. Any tab that has to show more than one kind of entity needs two values on the same filter, and that cannot currently be expressed. It blocks Graylog2/graylog-plugin-enterprise#15610.

How

filtersFromJson in graylog2-web-interface/src/components/common/EntityDataTable/hooks/useUserLayoutPreferences.ts reads the already collected values with property access on an Immutable map, which always yields undefined, so the second value for a key throws a TypeError.

To reproduce, store an entity_list_preferences layout document with filters: ["priority:2", "priority:3"] and open the matching entity table.

Separately, the same function splits each entry on : with no limit, so a filter value containing a colon is silently truncated. No current value contains one.

Source: Graylog2/graylog2-server