# Filtering data in kibana with wildcard not working **URL:** \ **Category:** Kibana\ **Created:** [June 19, 2018, 4:28pm UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537 "2018-06-19T16:28:38Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![nareshreddyp](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Post date:** [June 19, 2018, 4:28pm UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/1 "2018-06-19T16:28:39Z")
Hello, I have files like below ![Kibana_Issue](https://us1.discourse-cdn.com/elastic/original/3X/e/6/e6df15b401c25f724d8654dfa0bd8b8a7f2c440f.JPG) I want to add multiple filters by exclude data with \*.png \*.js \*.jsp etc ![search](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7dc25493c970bfd7ec33b607c8b2c61b3a77b08f.JPG) But it doesn't filter like expected. Please help. Regards, Naresh ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 19, 2018, 4:33pm UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/2 "2018-06-19T16:33:45Z")
If you want to filter based on extension, I would recommend that you parse it out into a separate filed at index time. Even if you were able to do what you want in Kibana, this type of leading wildcard query/filter is extremely inefficient and will not perform or scale well. ---
**Author:** ![nareshreddyp](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Post date:** [June 20, 2018, 7:05am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/3 "2018-06-20T07:05:23Z")
One of the filter is extension, other criteria may be /3dspace/\* or /3dspace/common/\* How can i achieve that without parsing the HTTP Request into multiple fields.? Because we wanted to see HTTP Requests with complete URL only, not splitting. Regards, Naresh ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 20, 2018, 7:18am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/4 "2018-06-20T07:18:28Z")
I suspect you will need to make sure you are filtering on a field that is mapped as `keyword` for this to work. Even with a trailing wildcard, which is not quite as bad as a leading wildcard, it may be slow at scale though. ---
**Author:** ![nareshreddyp](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Post date:** [June 20, 2018, 7:28am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/5 "2018-06-20T07:28:43Z")
It is already mapped as keyword {"name":"HTTP\_request","type":"string","count":0,"scripted":false,"searchable":true,"aggregatable":false,"readFromDocValues":false}, {"name":"HTTP\_request.keyword","type":"string","count":0,"scripted":false,"searchable":true,"aggregatable":true,"readFromDocValues":true} Regards, Naresh ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 20, 2018, 8:25am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/6 "2018-06-20T08:25:36Z")
Which version of the stack are you using? ---
**Author:** ![nareshreddyp](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Post date:** [June 20, 2018, 8:43am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/7 "2018-06-20T08:43:44Z")
6.2.3 ---
**Author:** ![elastock](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elastock/32/35672_2.png) [@elastock](https://discuss.elastic.co/u/elastock)\ **Post date:** [June 20, 2018, 9:16am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/8 "2018-06-20T09:16:37Z")
in the query lucene bar you can type ``` NOT HTTP_request : *.js AND NOT HTTP_request : *jsp AND NOT HTTP_request : *png ``` ---
**Author:** ![nareshreddyp](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Post date:** [June 20, 2018, 10:10am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/9 "2018-06-20T10:10:08Z")
Thank you very much. It worked with the lucene bar. Is there any specific reason it is not working with "add a filter" option ? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 18, 2018, 10:10am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537/10 "2018-07-18T10:10:19Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.