# How to use filters to get Non-zero ERRORCODE?

**URL:** <https://discuss.elastic.co/t/how-to-use-filters-to-get-non-zero-errorcode/63047>\
**Category:** Kibana\
**Created:** [October 14, 2016, 10:55am UTC](https://discuss.elastic.co/t/how-to-use-filters-to-get-non-zero-errorcode/63047 "2016-10-14T10:55:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![amits](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@amits](https://discuss.elastic.co/u/amits)\
**Post date:** [October 14, 2016, 10:55am UTC](https://discuss.elastic.co/t/how-to-use-filters-to-get-non-zero-errorcode/63047/1 "2016-10-14T10:55:17Z")

</div>

Hi all,

I have a log file like below, when I see in Kibana UI.

**message:[INFO] [18:45:45.935] [REQ] |STS|T1Status 1|GWStatus 1|MsgCode 5021|Error 0|Usr 12|** @version:1 @timestamp:October 13th 2016, 16:53:50.905 source:/else/user\_home/ietest/HFT\_IE/NSEFO\_GW\_Adaptor\_46118/nsefo\_adapter\_20161005\_2 input\_type:log beat.hostname:localhost.localdomain [beat.name](http://beat.name):localhost.localdomain type:log count:1 fields: - offset:29,167,737 host:localhost.localdomain tags:beats\_input\_codec\_plain\_applied \_id:AVe\_Ed4PiAbPTIgA68uz \_type:log \_index:logstashes-2016.10.13 \_score:

In above message field, Error is ZERO. "Error 0"

Now, I want to see all the messages with Non-ZERO Error.  
How to do that. Please help me in this regard.

thanks in advance.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 15, 2016, 9:06pm UTC](https://discuss.elastic.co/t/how-to-use-filters-to-get-non-zero-errorcode/63047/2 "2016-10-15T21:06:45Z")

</div>

You should just be able to search for that and it'll filter things.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:36pm UTC](https://discuss.elastic.co/t/how-to-use-filters-to-get-non-zero-errorcode/63047/3 "2017-07-06T13:36:29Z")

</div>


