# Find any document with a value in a nested path/structure using wild cards

**URL:** <https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018>\
**Category:** Elastic Search\
**Tags:** elastic-app-search\
**Created:** [January 29, 2024, 4:50pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018 "2024-01-29T16:50:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![mahnac](https://avatars.discourse-cdn.com/v4/letter/m/58f4c7/32.png) [@mahnac](https://discuss.elastic.co/u/mahnac)\
**Post date:** [January 29, 2024, 4:50pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/1 "2024-01-29T16:50:09Z")

</div>

I am trying to write a query that will find any document where the path campaigns.erp\*.campaigns.campaignCode contains a value. I am stuck.

Do you guys have any idea how to achieve this?

If you run the code below then I would expect the query to return 2 documents since the first and last POST contains documents where the path campaigns.erp\*.campaigns.campaignCode contains a value.

I tried using the query strings API, but I did not make much progress.

```auto
PUT /campaigns
{
  "mappings": {
    "properties": {
      "campaigns": {
        "type": "nested",
        "properties": {
          "erp1": {
            "properties": {
              "campaigns": {
                "type": "nested",
                "properties": {
                  "campaignCode": {
                    "type": "keyword"
                  }
                }
              }
            }
          },
          "erp2": {
            "properties": {
              "campaigns": {
                "type": "nested",
                "properties": {
                  "campaignCode": {
                    "type": "keyword"
                  }
                }
              }
            }
          }
        }
      }
    }
  }
}

```

```auto
POST /campaigns/_doc
{
  "campaigns": {
    "erp1": {
      "campaigns": [
        {
          "campaignCode": "1"
        }
      ]
    },
    "erp2": {
      "campaigns": [
        {
          "campaignCode": "2"
        }
      ]
    }
  }
}

POST /campaigns/_doc
{
  "campaigns": {
    "erp1": {
      "campaigns": []
    },
    "erp2": {
      "campaigns": []
    }
  }
}

POST /campaigns/_doc
{
  "campaigns": {
    "erp1": {
      "campaigns": []
    },
    "erp2": {
      "campaigns": [
        {
          "campaignCode": "3"
        }
      ]
    }
  }
}

```

```auto

GET /campaigns/_search
{
  "query": {
    "nested": {
      "path": "campaigns",
      "query": {
        "query_string": {
          "default_field": "campaigns.erp*.campaigns.campaignCode", 
          "query": "*"
        }
      }
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![Kathleen\_DeRusso](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kathleen_derusso/32/132039_2.png) [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\
**Post date:** [January 29, 2024, 8:23pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/2 "2024-01-29T20:23:16Z")

</div>

Hey @mahnac, your issue is that you have two nested fields so you have to use a nested subquery.

Try this:

```auto
GET /campaigns/_search
{
  "query": {
    "nested": {
      "path": "campaigns",
      "query": {
        "nested": {
          "path": "campaigns.erp2.campaigns",
          "query": {
            "query_string": {
               "default_field": "campaigns.erp*.campaigns.campaignCode",
               "query": "*"
              
            }
          }
        }
      }
    }
  }
}

```

We have another good example of multi-level nested queries in our [docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-nested-query.html#multi-level-nested-query-ex).

---

<div class="post-metadata">

**Author:** ![mahnac](https://avatars.discourse-cdn.com/v4/letter/m/58f4c7/32.png) [@mahnac](https://discuss.elastic.co/u/mahnac)\
**Post date:** [January 30, 2024, 8:36am UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/3 "2024-01-30T08:36:02Z")

</div>

Hello Kathleen,

Thank you for your suggestions and the link to the docs. Your query is what I am almost looking for, however, if I adjust the line "path": "campaigns.erp2.campaigns" to "path": "campaigns.erp1.campaigns" the result is only 1 hit instead of the 2 hits that your query provides. I need the line to be arbitrary, so it does not matter whether its is "campaigns.erp2.campaigns" or "campaigns.erp1.campaigns", but more like "campaigns.erp\*.campaigns". Is this possible? 🙂

---

<div class="post-metadata">

**Author:** ![Kathleen\_DeRusso](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kathleen_derusso/32/132039_2.png) [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\
**Post date:** [January 30, 2024, 1:44pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/4 "2024-01-30T13:44:52Z")

</div>

Right, I don't think you can do that, but if you have multiple nested calls like that (there has to be a finite number since you have to maintain the mappings) you could combine them in a boolean query.

---

<div class="post-metadata">

**Author:** ![mahnac](https://avatars.discourse-cdn.com/v4/letter/m/58f4c7/32.png) [@mahnac](https://discuss.elastic.co/u/mahnac)\
**Post date:** [January 30, 2024, 3:47pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/5 "2024-01-30T15:47:37Z")

</div>

Okay, I came up with a different solution to the problem, but thank you very much for your assistance and help.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 27, 2024, 3:47pm UTC](https://discuss.elastic.co/t/find-any-document-with-a-value-in-a-nested-path-structure-using-wild-cards/352018/6 "2024-02-27T15:47:38Z")

</div>

Closed on February 27, 2024, 3:47pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
