Kibana: Regex queries dont work as expected in kibana

Created on 29 Oct 2013  路  5Comments  路  Source: elastic/kibana

I would like to use some Regex in my queries but somehow, they dont work correctly.
As an example i have a field named "parameters" which i want to query for like this

parameters:/barcode....[0-9]{13}/

the field sometimes (not all the time) contains a parameter like this:

"parameter1"=>"foo", "barcode"=>"2637281225912", "parameter3"=>"bar"

i also tried other regex like the following but none of them worked correctly:
parameters:barcode\"=\>\"/[0-9]+/

Is this a bug or is something wrong with my queries?

Most helpful comment

It is really unfortunate that you can't query using regex if you don't have the '_all' field enabled.

All 5 comments

Please see the overview of the regular expression syntax elasticsearch supports here: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-regexp-query.html#regexp-syntax

Hi,

sorry but that link doesnt help me since i knew that site for 10h now but it doesnt help me solving my query issue. can you tell me whats wrong with my regex?

I don't think your query is wrong.
Kibana only matches regexp over the _all field :

About the regex query
The regex query allows you to use regular expressions to match terms in the _all field.

try to "inspect" one of the elements in your page, you will see that "_all" field is hardcoded :

      "global": true,
      "facet_filter": {
        "fquery": {
          "query": {
            "filtered": {
              "query": {
                "regexp": {
                  "_all": {
                    "value": "category: /pattern/"

It's an issue for me too, as I deliberately disabled the "_all" field

It is really unfortunate that you can't query using regex if you don't have the '_all' field enabled.

I agree.. It would be nice to have the ability to build regexp queries as I am having to do this manually with curl.

Was this page helpful?
0 / 5 - 0 ratings