# How can use filter and except a number

**URL:** <https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562>\
**Category:** Elastic Search\
**Created:** [May 1, 2024, 12:55pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562 "2024-05-01T12:55:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![baber1223](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baber1223/32/83533_2.png) [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Post date:** [May 1, 2024, 12:55pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562/1 "2024-05-01T12:55:31Z")

</div>

This my log sample :

172.20.100.100 - - [01/May/2024:16:08:12 +0330] "POST /serve/digiPay/requestStatus HTTP/1.0" 200 134 "-" "Java/17.0.6" process-time:644 session-id: -  
172.20.100.100 - - [01/May/2024:16:08:13 +0330] "POST /serve/Tosan/finalizeRequest HTTP/1.0" 200 126 "-" "ReactorNetty/1.0.11" process-time:5604 session-id: -  
172.20.100.100 - - [01/May/2024:16:08:23 +0330] "POST /serve/digiPay/deleteRequest HTTP/1.0" 200 142 "-" "Java/17.0.6" process-time:1040 session-id: -  
0:0:0:0:0:0:0:1 - - [01/May/2024:16:08:45 +0330] "GET / HTTP/1.0" 200 14258 "-" "check\_http/v2.2.1 (nagios-plugins 2.2.1)" process-time:11 session-id: -  
172.20.100.100 - - [01/May/2024:16:09:01 +0330] "POST /serve/Tosan/requestStatus HTTP/1.0" 200 129 "-" "ReactorNetty/1.0.11" process-time:1207 session-id: -

As you can find there is a digit such as 129 , 142 ,126 ,.... I have created a field with the name of bytes that can get query for example when type bytes \> 129  
it will find all numbers such as 142 , 134 , 14258

Now want to filter bytes \> 200 except 14258

---

<div class="post-metadata">

**Author:** ![Kathleen\_DeRusso](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kathleen_derusso/32/132039_2.png) [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\
**Post date:** [May 1, 2024, 1:11pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562/2 "2024-05-01T13:11:02Z")

</div>

Use a [Boolean query](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-bool-query.html) with a [range](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-range-query.html) query and a `must_not` filter for the value(s) you don't want.

---

<div class="post-metadata">

**Author:** ![baber1223](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baber1223/32/83533_2.png) [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Post date:** [May 1, 2024, 1:15pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562/3 "2024-05-01T13:15:53Z")

</div>

Thanks But I want to find bytes \> 200 except 14258  
Would you please say how can write query ?

---

<div class="post-metadata">

**Author:** ![Kathleen\_DeRusso](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kathleen_derusso/32/132039_2.png) [@Kathleen\_DeRusso](https://discuss.elastic.co/u/Kathleen_DeRusso)\
**Post date:** [May 1, 2024, 1:31pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562/4 "2024-05-01T13:31:49Z")

</div>

You can use the examples that I linked to generate the query!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 29, 2024, 1:32pm UTC](https://discuss.elastic.co/t/how-can-use-filter-and-except-a-number/358562/5 "2024-05-29T13:32:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.