Is wildcard queries not supporting in kibana discovery search ? want to search the all pods/container names in particular namespace

Elastic Stack Kibana
2

Hello @vikas4cloud

If you're using KQL, you should be able to search:

kubernetes.namespace_name.keyword : dev and kubernetes.pod_name.keyword : dev-web*

If you're using Lucene search, you should be able to use:

kubernetes.namespace_name.keyword:dev AND kubernetes.pod_name.keyword:dev-web*

From the field names, I can see you are not using the Index Templates provided with Filebeat to ingest Kubernetes logs.

This is an example on our demo data

1 Like