# Failed to parse the query in Kibana

**URL:** <https://discuss.elastic.co/t/failed-to-parse-the-query-in-kibana/247354>\
**Category:** Kibana\
**Created:** [September 3, 2020, 9:25am UTC](https://discuss.elastic.co/t/failed-to-parse-the-query-in-kibana/247354 "2020-09-03T09:25:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ankitsingh](https://avatars.discourse-cdn.com/v4/letter/a/e0b2c6/32.png) [@ankitsingh](https://discuss.elastic.co/u/ankitsingh)\
**Post date:** [September 3, 2020, 9:25am UTC](https://discuss.elastic.co/t/failed-to-parse-the-query-in-kibana/247354/1 "2020-09-03T09:25:57Z")

</div>

Hi ,

I have this kind of data:  
message: "message": "2020-09-02 08:11:55.000000000 +0000 state-handler: {"date":"2020-09-02T08:11:55.863Z","nfInstanceId":"0690e150-4c69-4d86-a49c-990bf056f333","instance":"ausf-nausf-auth-7cc94c6f97-p67xr","level":"INFO","catalog":"service-state","clusterDomain":"cluster.local","nfInstanceName":"default","subsystem":"","message":"Service state-handler is now in state STARTING","labels":["LIFECYCLE"],"hostname":"ausf-nausf-auth-7cc94c6f97-p67xr","vendor":"","service":"nausf-auth","arg":["state-handler"],"namespace":"ausf","id":"a54f347e-0b33-4ee2-9d65-97a40b2662a3","runid":"03093b3e-33b0-457d-83c2-cc3547ef4b5f","key":"STARTING","timestamp":1599034315863}",

I need to filter based on the labels so I am using the query like- message:"labels":["LIFECYCLE"]

but getting parsing error.  
parse\_exception: Encountered " ":" ": "" at line 1, column 16. Was expecting one of: ... ... ... "+" ... …

Could some one hepl plz.

Thanks for help.

---

<div class="post-metadata">

**Author:** ![matw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/matw/32/13913_2.png) [@matw](https://discuss.elastic.co/u/matw)\
**Post date:** [September 9, 2020, 7:28am UTC](https://discuss.elastic.co/t/failed-to-parse-the-query-in-kibana/247354/2 "2020-09-09T07:28:31Z")

</div>

Hi and welcome to our community!

You need to escape `"` of your search query to make this work:

`message: "\"labels\":[\"LIFECYCLE\"]"`

However, it's high likely that you won't find documents this way, I guess you're searching a text field and data is indexed with default settings?

Best,  
Matthias

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 7, 2020, 7:28am UTC](https://discuss.elastic.co/t/failed-to-parse-the-query-in-kibana/247354/3 "2020-10-07T07:28:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.