Looking at the docs for ElasticSearch/Kibana/Lucene, I've confirmed that the proper way to query a specific field is the syntax
field:thingIamSearchingFor
But Kibana doesn't seem to adhere to this at all for wildcards. I want to find all ids with a 1
in them. Using the search bar if I type something like:
id:*1
id:1*
it matches values that have 1s in them...but for every single field.
How can I wildcard on a single field?
@AriaFallah - Are you wanting something else besides what I'm doing here?
Kibana does not modify the search at all, it passes it directly through to Elasticsearch. This is an elasticsearch behavior, you may need to look at the mappings or analyzers for your field.
@AriaFallah try this one
{"wildcard":{"field":"*word*"}}
Hello, I am trying to get information on how to query in the search box in kibana.
I need to create a metric visualisation but in a range of time, in my case I want to get the last 7 days.
Any suggestions?
Most helpful comment
@AriaFallah try this one
{"wildcard":{"field":"*word*"}}