# I can't get my lowercase filter to work :/

**URL:** <https://discuss.elastic.co/t/i-cant-get-my-lowercase-filter-to-work/22238>\
**Category:** Elasticsearch\
**Created:** [February 18, 2015, 2:22pm UTC](https://discuss.elastic.co/t/i-cant-get-my-lowercase-filter-to-work/22238 "2015-02-18T14:22:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Oscar\_Cpl](https://avatars.discourse-cdn.com/v4/letter/o/3ec8ea/32.png) [@Oscar\_Cpl](https://discuss.elastic.co/u/Oscar_Cpl)\
**Post date:** [February 18, 2015, 2:22pm UTC](https://discuss.elastic.co/t/i-cant-get-my-lowercase-filter-to-work/22238/1 "2015-02-18T14:22:44Z")

</div>

Hi,

I need to have my @message field not analyzed and also to be lowercased  
when stored into ES, the reason is that Kibana can't do proper wildcard  
search because of lowercase\_expanded\_terms. I tried that but it seems that  
@message is still not lowercase:

{

> - logstash:  
> {
> - order: 0,
> - template: "logstash-\*",
> - settings:  
> {
> - index.analysis.analyzer.lowercaseonly.type: "custom",
> - index.query.default\_field: "@message",
> - index.refresh\_interval: "3s",
> - index.analysis.analyzer.lowercaseonly.filter.0: "lowercase",
> - index.analysis.analyzer.lowercaseonly.tokenizer: "keyword"  
> },
> 
> - mappings:  
> {
> - _default_:  
> {
> - 
> ## dynamic\_templates: [
> {  
> - string\_fields:  
> {  
> - mapping:  
> {  
> - index: "analyzed",  
> - omit\_norms: true,  
> - type: "string",  
> - fields:  
> {  
> - raw:  
> {  
> - index: "not\_analyzed",  
> - ignore\_above: 256,  
> - type: "string"  
> }  
> }  
> },  
> - match\_mapping\_type: "string",  
> - match: "\*"  
> }  
> }  
> ],
> - properties:  
> {
> - host:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - received\_at:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - @message:  
> {
> - index: "not\_analyzed",
> - analyzer: "lowercaseonly",
> - type: "string"  
> },
> 
> - file:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - thread:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - path:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - class:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - logger\_name:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - method:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - gameKey:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - @version:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> },
> 
> - hostname\_\_\_\_\_\_\_\_\_\_:  
> {
> - index: "not\_analyzed",
> - type: "string"  
> }  
> },
> 
> - \_all:  
> {
> - enabled: false  
> }  
> }  
> },
> 
> - aliases: { }  
> }
> 
> }

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/ddc487cb-94f8-449e-af45-e09f12ed7e30%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/ddc487cb-94f8-449e-af45-e09f12ed7e30%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:31am UTC](https://discuss.elastic.co/t/i-cant-get-my-lowercase-filter-to-work/22238/2 "2017-07-06T00:31:52Z")

</div>