# Elasticsearch Restful API query string

**URL:** <https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707>\
**Category:** Elasticsearch\
**Created:** [August 17, 2021, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707 "2021-08-17T14:55:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![f26227279](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/f26227279/32/21296_2.png) [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Post date:** [August 17, 2021, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707/1 "2021-08-17T14:55:24Z")

</div>

The query String in Kibana is : `system:APC AND host: F12*R2R* AND message:"Turn to Phase [F12P7]"` , and I want to query through Restful API like below:

```auto
 String bodycontent="{"
                +" \"_source\": [\"@timestamp\",\"eqpid\",\"lotid\",\"stageid\"],"
                +" \"query\": {"
                +" \"bool\":{"
                +" \"must\":[{"
                +" \"query_string\" : {"
                +" \"query\": \"(system:APC) AND (host:F12*R2R*) AND (message:\*Turn to Phase [F12P7]\*)\"}"
                +" },{"
                +" \"range\":{"
                +" \"@timestamp\":{"
                +" \"gte\":\""+start+"\","
                +" \"lte\":\""+end+"\"}"
                +" }"
                + "}]}},"
                +" \"sort\" : [{\"@timestamp\" : { \"order\" : \"desc\" }}]"
                +"}";

```

but HTTP response 500 error code, the message raw data is like below:

XXXXXXXXXXX XXXXX XX XXX XXXXXXXXXXXXX XX XXXX XXXXXXXX XXX Ack=0 Description="No valid MAPId [LGSQ123] exists. Turn to Phase [F12P7]" XXXX XXXX XXXXXXXXXXXX XXXX

How could I query the specified string in the message? thanks in advance !

---

<div class="post-metadata">

**Author:** ![f26227279](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/f26227279/32/21296_2.png) [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Post date:** [August 18, 2021, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707/2 "2021-08-18T06:16:46Z")

</div>

could anyone one help~

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 15, 2021, 6:17am UTC](https://discuss.elastic.co/t/elasticsearch-restful-api-query-string/281707/3 "2021-09-15T06:17:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.