# Is wildcard queries not supporting in kibana discovery search ? want to search the all pods/container names in particular namespace **URL:** \ **Category:** Kibana\ **Created:** [April 7, 2020, 7:55am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847 "2020-04-07T07:55:20Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![vikas4cloud](https://avatars.discourse-cdn.com/v4/letter/v/3e96dc/32.png) [@vikas4cloud](https://discuss.elastic.co/u/vikas4cloud)\ **Post date:** [April 7, 2020, 7:55am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847/1 "2020-04-07T07:55:20Z")
Want to search the all pods/container names in particular namespace in kibana discovery search expection :- should display all available resources as per query/wildcard Search qurie :- kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword :dev-web\* by providing any \* at the end should display all possible name like dev-web-0 dev-web-1 dev-web-2 dev-web-3 but not displaying anything .. tried some possible search like kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword :""dev-web\*"" -- not working kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword : "dev-web\*" --- not working kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword : "dev-web-_" -- not working kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword :dev-web_ --- not working kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword :dev-web-0 ---- worked kubernetes.namespace\_name.keyword : "dev" and kubernetes.pod\_name.keyword : "dev-web-0" --- worked Why any wildcard is not working any idea ?? ---
**Author:** ![Luca\_Belluccini](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/luca_belluccini/32/33239_2.png) [@Luca\_Belluccini](https://discuss.elastic.co/u/Luca_Belluccini)\ **Post date:** [April 7, 2020, 8:43am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847/2 "2020-04-07T08:43:00Z")
Hello @vikas4cloud If you're using KQL, you should be able to search: ```auto kubernetes.namespace_name.keyword : dev and kubernetes.pod_name.keyword : dev-web* ``` If you're using Lucene search, you should be able to use: ```auto kubernetes.namespace_name.keyword:dev AND kubernetes.pod_name.keyword:dev-web* ``` From the field names, I can see you are not using the Index Templates provided with Filebeat to ingest Kubernetes logs. This is an example on our [demo data](https://demo.elastic.co/app/kibana#/discover?_g=(refreshInterval:(pause:!t,value:0),time:(from:'2020-03-17T21:44:41.407Z',to:'2020-03-21T03:59:32.039Z'))&_a=(columns:!(_source),index:'filebeat-*',interval:auto,query:(language:kuery,query:'kubernetes.namespace+:+gre*+and+kubernetes.pod.name:+nginx-*'),sort:!(!('@timestamp',desc)))) ---
**Author:** ![vikas4cloud](https://avatars.discourse-cdn.com/v4/letter/v/3e96dc/32.png) [@vikas4cloud](https://discuss.elastic.co/u/vikas4cloud)\ **Post date:** [April 7, 2020, 9:00am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847/3 "2020-04-07T09:00:01Z")
@Luca_Belluccini Much appreciated its solved my problem 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 5, 2020, 9:00am UTC](https://discuss.elastic.co/t/is-wildcard-queries-not-supporting-in-kibana-discovery-search-want-to-search-the-all-pods-container-names-in-particular-namespace/226847/4 "2020-05-05T09:00:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.