# Escape double quotes - query error with curl

**URL:** <https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139>\
**Category:** Elasticsearch\
**Created:** [January 29, 2019, 10:15am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139 "2019-01-29T10:15:48Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sabdoul](https://avatars.discourse-cdn.com/v4/letter/s/74df32/32.png) [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Post date:** [January 29, 2019, 10:15am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/1 "2019-01-29T10:15:48Z")

</div>

Hello,  
I have my request below that works in Kibana DevTools that I also want to run with curl:

```auto
curl -XGET "http://localhost:9200/"index-"$(date -d "yesterday" '+%Y.%m.%d')/_search" -H'Content-Type: application/json' -d'
 {
      "query": {
        "bool": {
          "must": [
            {
              "query_string": {
                "analyze_wildcard": true,
                "query": """field_name1: "Search" AND (field_name2:"10.165.4.3" OR field_name3:"10.165.4.4")"""
              }
            }
          ]
        }
      },
      "size": 0,
      "_source": {
        "excludes": ["_shards","hits","took","timed_out"]
      },
      "aggs": {
        "2": {
          "filters": {
            "filters": {
              "Google": {
                "query_string": {
                  "query": "field_name4:google.*",
                  "analyze_wildcard": true
                }
              },
              "Bing": {
                "query_string": {
                  "query": "field_name5:bing.*",
                  "analyze_wildcard": true
                }
              }
            }
          },
          "aggs": {
            "3": {
              "sum": {
                "field": "bytes_from_server"
              }
            }
          }
        }
      }
    }'  

```

The problem is that with double quotes, curl send me an error for this part of my request:

`"query": """field_name1: "Search" AND (field_name2:"10.165.4.3" OR field_name3:"10.165.4.4")"""`

I tried several solutions proposed here [https://stackoverflow.com/questions/18612248/how-to-escape-single-quotes-into-double-quotes-into-single-quotes](https://stackoverflow.com/questions/18612248/how-to-escape-single-quotes-into-double-quotes-into-single-quotes) and [https://stackoverflow.com/questions/4514199/how-to-send-double-quote-in-d-parameter-for-curl-exe/15828662#15828662](https://stackoverflow.com/questions/4514199/how-to-send-double-quote-in-d-parameter-for-curl-exe/15828662#15828662), which did not work.  
I wanted to know how to escape these double quotes so that it works with curl or how to modify my request to have the same result without these double quotes?

thank you in advance

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 29, 2019, 10:23am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/2 "2019-01-29T10:23:40Z")

</div>

May be try with `\"` ?

---

<div class="post-metadata">

**Author:** ![sabdoul](https://avatars.discourse-cdn.com/v4/letter/s/74df32/32.png) [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Post date:** [January 29, 2019, 10:29am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/3 "2019-01-29T10:29:20Z")

</div>

I tried this without success  
`"query": \"\""field_name1: "Search" AND (field_name2:"10.165.4.3" OR field_name3:"10.165.4.4")"\"\"`

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [January 29, 2019, 10:34am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/4 "2019-01-29T10:34:18Z")

</div>

Not sure what this means: `\"\""field_name1:`

I'd probably write something like:

```
"query": "field_name1: \"Search\" AND (field_name2:\"10.165.4.3\" OR field_name3:\"10.165.4.4\")"

```

Or:

```
"query": "field_name1: """Search""" AND (field_name2:"""10.165.4.3""" OR field_name3:"""10.165.4.4""")"
```

---

<div class="post-metadata">

**Author:** ![sabdoul](https://avatars.discourse-cdn.com/v4/letter/s/74df32/32.png) [@sabdoul](https://discuss.elastic.co/u/sabdoul)\
**Post date:** [January 29, 2019, 10:37am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/5 "2019-01-29T10:37:42Z")

</div>

Thank you @dadoonet it works with this syntax:  
`"query": "\"\"field_name1: \"Search\" AND (field_name2:\"10.165.4.3\" OR field_name3:\"10.165.4.4\")\"\""`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 26, 2019, 10:37am UTC](https://discuss.elastic.co/t/escape-double-quotes-query-error-with-curl/166139/6 "2019-02-26T10:37:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.