I'm trying to construct a simple query to match all logs lines that start with "Error: ", but when I try to search for this string, all lines that include the word 'error' (not case sensitive) anywhere in the string are returned. It doesn't seem to do anything with the colon in the string. I'd love it be case sensitive and take the colon into account with the query. If I can somehow indicate that the text should start with this string, that would be even better.
According to the KQL documentation, if I'm reading it right (https://www.elastic.co/guide/en/kibana/7.1/kuery-query.html), I should be able to use this query to accomplish what I'm looking for:
log_text: "Error: "
But it doesn't return what I described. I tried a number of variations of this as well, hoping someone can guide me in the right direction here, I feel like I'm missing something minor. Thanks in advance.