# Help on Elastic Search query **URL:** \ **Category:** Elasticsearch\ **Created:** [January 19, 2024, 6:56am UTC](https://discuss.elastic.co/t/help-on-elastic-search-query/351409 "2024-01-19T06:56:23Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![hmulky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hmulky/32/130929_2.png) [@hmulky](https://discuss.elastic.co/u/hmulky)\ **Post date:** [January 19, 2024, 6:56am UTC](https://discuss.elastic.co/t/help-on-elastic-search-query/351409/1 "2024-01-19T06:56:23Z")
Hello, I think i may need some help here. I have a record in EFK as below ```auto orchestrator.resource.name : "akr1r3*" and (log.file.path : /var/log/abc.log) and (message : "Signing with P-Origination Id \\[F92DAEC5-F1C9-4F8B-B913-84B8F46F98EC] using Trunkgroup ID \\[STI_IN_TG\\]") ``` I am able to get hits when i provide the above query but the value "F92DAEC5-F1C9-4F8B-B913-84B8F46F98EC" is random and I might not get the same value. So we modified the value to match for any using "\*". The modified query is as below ```auto orchestrator.resource.name : "akr1r3*" and (log.file.path : /var/log/abc.log) and (message : "Signing with P-Origination Id \\[.\\*\\] using Trunkgroup ID \\[STI_IN_TG\\]") ``` The query fails for the above string. What might be wrong here? I can see below query works but i wanted to use the text "using Trunkgroup ID \[STI\_IN\_TG\]" also in search ```auto orchestrator.resource.name : "akr1r3*" and (log.file.path : /var/log/abc.log) and (message : "Signing with P-Origination Id \\[.\\*\\]") ``` ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 16, 2024, 6:57am UTC](https://discuss.elastic.co/t/help-on-elastic-search-query/351409/2 "2024-02-16T06:57:01Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.