Field value exact string Match

In source field have value "/var/access.log" and "/var/access.log - 20180820" . I want to search only source field value matched "/var/access.log". How to write discover query. Please guide me

It depends on how your field is mapped. If you're using Elasticsearch's default mappings for a string field you probably have a fieldName.keyword field. You can query against this field to do exact matches since no analysis is performed against keyword fields. e.g. fieldName.keyword:/var/access.log

Thanks. It's working fine...

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.