# How to use regex
**URL:** https://discuss.elastic.co/t/how-to-use-regex/231250
**Category:** Elasticsearch
**Created:** [May 6, 2020, 4:19am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250 "2020-05-06T04:19:37Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@user2416](https://discuss.elastic.co/u/user2416)
#### Post date: [May 6, 2020, 4:19am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/1 "2020-05-06T04:19:38Z")
Hi,
I am trying to match multiple fileds with multiple values and also trying to match some values using regex. Below is my query. But its not working. Can someone help me with this query.
```auto
{
"query": {
"bool": {
"should": {
"match": {
"Records.eventSource": "service"
}
},
"must": {
"bool": {
"should": [
{
"match": {
"regexp":{
"Records.eventName": "List*"
}
}
},
{
"match": {
"regexp":{
"Records.eventName": "Get.*"
}
}
}
]
}
}
}
}
}
```
---
### Author:  [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)
#### Post date: [May 6, 2020, 4:21am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/2 "2020-05-06T04:21:07Z")
"List\*" is not a proper regex pattern. You might want to try **wildcard** instead.
---
### Author:  [@user2416](https://discuss.elastic.co/u/user2416)
#### Post date: [May 6, 2020, 4:25am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/3 "2020-05-06T04:25:05Z")
@Jack_Phan I tried wildcard also, still its not working. Can I use wildcard inside match?
---
### Author:  [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)
#### Post date: [May 6, 2020, 4:31am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/4 "2020-05-06T04:31:16Z")
> [@user2416](#):
>
> { "query": { "bool": { "should": { "match": { "Records.eventSource": "service" } }, "must": { "bool": { "should": [{ "match": { "regexp":{ "Records.eventName": "List\*" } } }, { "match": { "regexp":{ "Records.eventName": "Get.\*" } } }] } } } } }
I'm afraid not. Can you try to replace **match** by **wildcard** directly.
---
### Author:  [@user2416](https://discuss.elastic.co/u/user2416)
#### Post date: [May 6, 2020, 5:11am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/5 "2020-05-06T05:11:53Z")
@Jack_Phan after removing match filed its working, But when I include range in the query like below its not working. Where should I use range filter inside this query?
```auto
{
"query": {
"bool": {
"should": {
"match": {
"Records.eventSource": "service"
}
},
"must": {
"bool": {
"should": [
{
"wildcard": {
"Records.eventName": "list*"
}
},
{
"wildcard": {
"Records.eventName": "get*"
}
},
{
"range" : {
"@timestamp" : {
"gte" : "now-1h"
}
}}
]
}
}
}
}
}
```
---
### Author:  [@Jack\_Phan](https://discuss.elastic.co/u/Jack_Phan)
#### Post date: [May 6, 2020, 5:18am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/8 "2020-05-06T05:18:48Z")
Try this:
> "query": {
> "bool": {
> "must": [
> {
> "wildcard": {
> "Records.eventName": "list\*"
> }
> }
> ],
> "filter": [
> {
> "range": {
> "@timestamp": {
> "from": "now-1m"
> }
> }
> }
> ]
> }
> }
---
### Author:  [@user2416](https://discuss.elastic.co/u/user2416)
#### Post date: [May 6, 2020, 5:19am UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/9 "2020-05-06T05:19:57Z")
working now. Thanks
---
### Author:  [@user2416](https://discuss.elastic.co/u/user2416)
#### Post date: [May 6, 2020, 9:46pm UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/10 "2020-05-06T21:46:07Z")
@Jack_Phan I see that when i add range, Its not applying above filters but its filtering all events in the time range. How can I apply filters and get filtered data during particular time range?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 3, 2020, 9:46pm UTC](https://discuss.elastic.co/t/how-to-use-regex/231250/11 "2020-06-03T21:46:08Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.