Hello. I have a keyword field in elastic. I index arrays of string into it. I usually search with KQL like field: value and it works. But how I search for empty string? I tried field:, but that gives Search Error. I tried field: "", but that makes kibana tab lock up.

Found it. I think its kibana bug. Create index like this: PUT /lab_1 { "settings": { "number_of_shards": 1, "number_of_replicas": 0 }, "mappings": { "properties": { "trigger": { "type": "keyword" }, "@timestamp": { "type": "date" } } …

cheshirecat (Krzysztof Smaga) August 16, 2022, 10:25am 3

Something like this? Query for an empty string.

1 Like

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Searching array for empty string causes tab lockup and shows garbage