# Can't seem to search for a period in the message field

**URL:** <https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200>\
**Category:** Kibana\
**Created:** [December 30, 2015, 10:55pm UTC](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200 "2015-12-30T22:55:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dpcrown](https://avatars.discourse-cdn.com/v4/letter/d/58f4c7/32.png) [@dpcrown](https://discuss.elastic.co/u/dpcrown)\
**Post date:** [December 30, 2015, 10:55pm UTC](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200/1 "2015-12-30T22:55:51Z")

</div>

Hi everyone, I'm trying to do a really basic search in Kibana 4.0.1 but I'm having a lot of difficulty for some reason. Basically we want to search for ".prod" in the message field. The period is important, but Kibana seems to be ignoring it, returning everything that matches prod, even stuff like /PROD/whatever, which we don't want.

I've tried to escape the period with "", but there's no difference. Am I doing something wrong? Here's our filter:

`"404" AND (".prod" OR ".cat")`

It doesn't work on .prod or .cat.

---

<div class="post-metadata">

**Author:** ![spalger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spalger/32/14092_2.png) [@spalger](https://discuss.elastic.co/u/spalger)\
**Post date:** [December 30, 2015, 11:50pm UTC](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200/2 "2015-12-30T23:50:00Z")

</div>

This is likely because of the way that elasticsearch is analyzing your field values and not something that Kibana can control. Checkout [this section of the Elasticsearch Definitive Guide](https://www.elastic.co/guide/en/elasticsearch/guide/current/analysis-intro.html) for more information about analysis.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:05pm UTC](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200/3 "2017-07-06T14:05:48Z")

</div>