Highlighting IP-Adresses without searching for them

Elastic Stack Elasticsearch
1

Hi,

is it possible to highlight any IP address inside a filed of type string
without searching for the IP address?

Say I'm having syslog messages stored in ES and I want to search the
message field using term: Failed.
Is there a way to highlight all the IP addresses in the message field of
the matching documents although I did not search for any IP address?

Thanks for a short hint :slight_smile:
Sven.

--

2

Hi Sven,

I think the easiest, and most logical way of solving this is in the
user-interface. Just pick a valid regex for detecting ip addresses and wrap
it with a span that has a certain (background)color.

Best regards,

Robin Verlangen
Software engineer
*
*
W http://www.robinverlangen.nl
E robin@us2.nl

http://goo.gl/Lt7BC

Disclaimer: The information contained in this message and attachments is
intended solely for the attention and use of the named addressee and may be
confidential. If you are not the intended recipient, you are reminded that
the information remains the property of the sender. You must not use,
disclose, distribute, copy, print or rely on this e-mail. If you have
received this message in error, please contact the sender immediately and
irrevocably delete this message and any copies.

On Thu, Nov 29, 2012 at 2:13 PM, Sven Reissmann oo35179831@gmail.comwrote:

Hi,

is it possible to highlight any IP address inside a filed of type string
without searching for the IP address?

Say I'm having syslog messages stored in ES and I want to search the
message field using term: Failed.
Is there a way to highlight all the IP addresses in the message field of
the matching documents although I did not search for any IP address?

Thanks for a short hint :slight_smile:
Sven.

--

--

3

Hi,

thanks for your reply.
This is exactly what I'm doing right now. I was just wondering if it is
possible to do it directly using elasticsearch.

Regards, Sven.

On Thursday, November 29, 2012 2:13:22 PM UTC+1, Sven Reissmann wrote:

Hi,

is it possible to highlight any IP address inside a filed of type string
without searching for the IP address?

Say I'm having syslog messages stored in ES and I want to search the
message field using term: Failed.
Is there a way to highlight all the IP addresses in the message field of
the matching documents although I did not search for any IP address?

Thanks for a short hint :slight_smile:
Sven.

--