Trying to grasp why I can't do regexp searches on a field defined as: "message": { "type": "text", "fields": { "keyword": { "type" : "keyword" } } }, have read what I could find in this forum and stackoverflow, but nothing really pointed me in the right direction. Any hints…

Could you try querying the message.keyword field instead and use .* instead of * to match unknown characters? message.keyword:/Sep.*SNAT_IN=.*/ works for me.

Kibana and old beast regexp searches

Elastic Stack Kibana

flash1293 (Joe Reuter) September 25, 2019, 9:27am 4

Ah, maybe you didn't turn of KQL (same problem as in this topic: Kibana Regex Searching Problems)

Could you try clicking "KQL" in the top right of the search bar, set it to "Lucene" and execute the search again?

Topic		Replies	Views
Kibana Regex Searching Problems Kibana	4	6670	November 23, 2018
How to search Regular expressions in Kibana 7.5 Kibana	3	1081	March 2, 2020
Issues with Regex in Kibana Kibana	3	1498	February 28, 2019
Kibana Discovery Regex Kibana	4	11798	October 25, 2019
Regex Search in Kibana Kibana	2	53786	September 14, 2017

Kibana and old beast regexp searches

Related topics