thanks for your response, below is my mapping.
"mappings": {
"default":{
"dynamic_templates":[
{
"string_fields":{
"mapping":{
"index":"not_analyzed",
"type":"string",
"doc_values":true
},
"match_mapping_type":"string",
"match":"*"
}
}
],
"properties":{
"filename":{
"index":"not_analyzed",
"type":"string"
},
"filepath":{
"index":"not_analyzed",
"type":"string"
},
"line_num":{
"index":"not_analyzed",
"type":"long"
},
"msg_ext":{
"index":"not_analyzed",
"type":"long"
}
},
"_all":{
"enabled":false
}
}
}
i am using the below match query
{
"query": {
"match": {
"msg_ext": ".test.status:.f."
}
}
}
i am using match query , but i would expect to work with regexp/wild card as well.
and i am expecting the below kind of documents back from the query .
Abc 2 cmd 24 Test Status: FAILED