# Help with kibana partial string search

**URL:** https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166
**Category:** Elasticsearch
**Created:** [August 8, 2014, 4:39pm UTC](https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166 "2014-08-08T16:39:15Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Kingdom\_Joy](https://avatars.discourse-cdn.com/v4/letter/k/dc4da7/32.png) [@Kingdom\_Joy](https://discuss.elastic.co/u/Kingdom_Joy)
#### Post date: [August 8, 2014, 4:39pm UTC](https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166/1 "2014-08-08T16:39:15Z")

</div>

Hello,

I have logs that look like these:  
07 Aug 2014 20:59:15,903 [ERROR] some-id  
this.is.a.package.ExceptionTranslator: ABCD FHGHIK EX:Failed to invoke

I use ELK stack. In Kibana I am trying to search for logs that contain  
string "ABCD FHGHIK EX" but it returns no data, I've tried using regex  
/ABCD FHGHIK EX\*/ but it also returns no data. I also tried escaping  
whitespace /ABCD\ FHGHIK\ EX\*/ but it also returns nothing.

Could someone explain how to make this type of search work?

Thank you!

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Cristian\_Falcas](https://avatars.discourse-cdn.com/v4/letter/c/e274bd/32.png) [@Cristian\_Falcas](https://discuss.elastic.co/u/Cristian_Falcas)
#### Post date: [August 8, 2014, 5:52pm UTC](https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166/2 "2014-08-08T17:52:51Z")

</div>

Try like this:

._"ABCD FHGHIK EX"._

On Fri, Aug 8, 2014 at 7:39 PM, Kingdom Joy [thekingdomofjoy@gmail.com](mailto:thekingdomofjoy@gmail.com)  
wrote:

> Hello,
> 
> I have logs that look like these:  
> 07 Aug 2014 20:59:15,903 [ERROR] some-id  
> this.is.a.package.ExceptionTranslator: ABCD FHGHIK EX:Failed to invoke
> 
> I use ELK stack. In Kibana I am trying to search for logs that contain  
> string "ABCD FHGHIK EX" but it returns no data, I've tried using regex  
> /ABCD FHGHIK EX\*/ but it also returns no data. I also tried escaping  
> whitespace /ABCD\ FHGHIK\ EX\*/ but it also returns nothing.
> 
> Could someone explain how to make this type of search work?
> 
> Thank you!
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAMo7R\_eXju5%2B1eRifhB%2BB4TCNgxkfLSUucV558j1pO9rJ1hBqA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAMo7R_eXju5%2B1eRifhB%2BB4TCNgxkfLSUucV558j1pO9rJ1hBqA%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Kingdom\_Joy](https://avatars.discourse-cdn.com/v4/letter/k/dc4da7/32.png) [@Kingdom\_Joy](https://discuss.elastic.co/u/Kingdom_Joy)
#### Post date: [August 11, 2014, 5:54am UTC](https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166/3 "2014-08-11T05:54:48Z")

</div>

Thank you for suggestion but it doesn't work for me ;(

On Friday, 8 August 2014 10:53:29 UTC-7, Cristian Falcas wrote:

> Try like this:
> 
> ._"ABCD FHGHIK EX"._
> 
> On Fri, Aug 8, 2014 at 7:39 PM, Kingdom Joy \<[theking...@gmail.com](mailto:theking...@gmail.com)  
> \<javascript:\>\> wrote:
> 
> > Hello,
> > 
> > I have logs that look like these:  
> > 07 Aug 2014 20:59:15,903 [ERROR] some-id  
> > this.is.a.package.ExceptionTranslator: ABCD FHGHIK EX:Failed to invoke
> > 
> > I use ELK stack. In Kibana I am trying to search for logs that contain  
> > string "ABCD FHGHIK EX" but it returns no data, I've tried using regex  
> > /ABCD FHGHIK EX\*/ but it also returns no data. I also tried escaping  
> > whitespace /ABCD\ FHGHIK\ EX\*/ but it also returns nothing.
> > 
> > Could someone explain how to make this type of search work?
> > 
> > Thank you!
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups  
> > "elasticsearch" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an  
> > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com)  
> > [https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/5021ff02-ac9b-4202-b8e3-486d381c8dd9%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > .  
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/565f6562-89db-4581-907a-a402e5861df1%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/565f6562-89db-4581-907a-a402e5861df1%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:09am UTC](https://discuss.elastic.co/t/help-with-kibana-partial-string-search/19166/4 "2017-07-06T01:09:41Z")

</div>


