Kibana 7.10 searching with special characters and wildcard

Elastic Stack Kibana
1

I want to use * with some special characters.
e.g. url.path: "/apis/aa.bb.io/v1/checking"* and user: "system"*

keep getting the error messages:
KQLSyntaxError: Expected AND, OR, end of input, whitespace but "" found.
url.path: "/apis/aa.bb.io/v1/checking" and user: "system"*
-----------------------------------------------------^

Can anyone help me?
Thanks

2

Welcome to our community! :smiley:

At a guess it's because you have a wildcard outside the quotes. What are you trying to find?

3

I want to find something like url.path start with "/apis/aa.bb.io/v1/checking" --> /apis/aa.bb.io/v1/checkingxxxxxxxxxx
but I don't know how to search it.

4

Take a look at Kibana Query Language | Kibana Guide [7.14] | Elastic

5

I read it before, there is no answer using special characters and wildcards.

please help me.
Thanks.

6

That link literally points to a section called Wildcards queries, if that's not working then it'd be good to understand why not.

7

Anyone can help me?

e.g want to find user.id values start with "system:"

My search: user.id:system:*

Error code:
KQLSyntaxError: Expected "(", "{", value, whitespace but end of input found.
user.id:
----------^

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.