# How to query a field type of string exactly in URI search?

**URL:** <https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407>\
**Category:** Elasticsearch\
**Created:** [November 5, 2017, 8:22am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407 "2017-11-05T08:22:09Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![WuChuan](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Post date:** [November 5, 2017, 8:22am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/1 "2017-11-05T08:22:09Z")

</div>

Hi,

Here I need to query logs from an external ELK system which **only supports HTTP GET request** for security.

So I guess I can only use the URI-api to do that. There are many logs but I need only two types in "`/var/ftds/trace/`" and "`/var/log/stat/`".

I tried to query them by "`q=path:/var/ftds/trace/`" or "`q=path:/\/var\/ftds\/trace/*/`" but failed(no result or not the exact documents).

any suggestions? Thanks.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 5, 2017, 8:36am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/2 "2017-11-05T08:36:04Z")

</div>

You can do GET with a body according to the RFC and elasticsearch

---

<div class="post-metadata">

**Author:** ![WuChuan](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Post date:** [November 5, 2017, 9:13am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/4 "2017-11-05T09:13:43Z")

</div>

OK, I'll try later, but I am a bit worried if this can effect because the target ELK system is not the original elasticsearch. if it does not support, any way else in URI-search?

thanks.

> [@dadoonet](#):
>
> You can do GET with a body according to the RFC and elasticsearch

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 5, 2017, 9:28am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/5 "2017-11-05T09:28:52Z")

</div>

What is « the target ELK » means?

BTW we say elastic stack and not ELK anymore.

---

<div class="post-metadata">

**Author:** ![WuChuan](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Post date:** [November 5, 2017, 10:25am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/6 "2017-11-05T10:25:27Z")

</div>

“the target elastic stack” is a further developed system based on the open source ES which I query from.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 5, 2017, 11:24am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/7 "2017-11-05T11:24:13Z")

</div>

> a further developed system

Which is?

I mean is that something internal you have in your company and a known product?

---

<div class="post-metadata">

**Author:** ![WuChuan](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Post date:** [November 5, 2017, 11:33am UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/8 "2017-11-05T11:33:44Z")

</div>

> [@dadoonet](#):
>
> Which is?
> 
> I mean is that something internal you have in your company and a known product?

not our company's, we just call it ELK.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [November 5, 2017, 12:30pm UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/9 "2017-11-05T12:30:58Z")

</div>

I don’t understand sorry.

What is the system you’re talking about?

Is it Elasticsearch, Logstash, Kibana ? Or something else?

---

<div class="post-metadata">

**Author:** ![WuChuan](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@WuChuan](https://discuss.elastic.co/u/WuChuan)\
**Post date:** [November 7, 2017, 1:33pm UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/10 "2017-11-07T13:33:34Z")

</div>

> [@dadoonet](#):
>
> I don’t understand sorry.
> 
> What is the system you’re talking about?
> 
> Is it Elasticsearch, Logstash, Kibana ? Or something else?

Yes, it is Elasticsearch, Logstash and Kibana.

And `GET with a body` works. thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 5, 2017, 1:33pm UTC](https://discuss.elastic.co/t/how-to-query-a-field-type-of-string-exactly-in-uri-search/106407/11 "2017-12-05T13:33:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
