How to search all Domain

Why domain : * include and
but not include

How to Search all Domain (Lucene or KQL)

Thanks you Master

Have you tried this in KQL?

domain: *

(Without the quotes?)

Without the quotes Lucene

Without the quotes KQL

This Question :
First Word "www100" ( word + number combination) can't use *

Try this in Lucene query:


You can use "Inspect" button to get the actual search request and it is really useful in debug.
The context you want to compare is original string not analyzed terms, so you should use the keyword field.

Once you use " double quote, Kibana will use Phrase Query in KQL or just escape the double quote in Lucene query, that is not what you want.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.