Hi, I get some json logs which I ingest via logstash (json filter plugin). The current version of the logs is setting null values for some json fields. In Kibana's json view for an event it looks like this: [image] How can I filter on details.OUT.Quittungnachricht to search for values which are…

Use the exists query to find field with missing values. Create a filter using exists operator [54%20AM] Then negate the filter after its created by clicking exclude results. [00%20AM]

How to filter for field with value NULL?

Elastic Stack Kibana

Nathan_Reese (Nathan Reese) August 28, 2019, 5:50pm 2

Use the exists query to find field with missing values.

Create a filter using exists operator

Then negate the filter after its created by clicking exclude results.

1 Like

Topic		Replies	Views
How to find Documents where specific field is NULL Kibana	2	3074	July 6, 2017
Where to add a missing filter in this Kibana search Kibana	5	17409	July 6, 2017
Excluding field which return null in Kibana Kibana	2	7629	July 6, 2017
Filter out String that are "" Kibana	4	8407	November 23, 2017
Missing filter to check the existence of field and null_value Elasticsearch	4	1744	July 6, 2017

How to filter for field with value NULL?

Related topics