Trying to grasp why I can't do regexp searches on a field defined as: "message": { "type": "text", "fields": { "keyword": { "type" : "keyword" } } }, have read what I could find in this forum and stackoverflow, but nothing really pointed me in the right direction. Any hints…

Could you try querying the message.keyword field instead and use .* instead of * to match unknown characters? message.keyword:/Sep.*SNAT_IN=.*/ works for me.

Discuss the Elastic Stack

Kibana and old beast regexp searches

Elastic Stack Kibana

stefws (Steffen Winther Sørensen) September 25, 2019, 10:11am 9

Yeap that works, thanks!

Topic		Replies	Views
Regex Search in Kibana Kibana	2	54015	September 14, 2017
How to search Regular expressions in Kibana 7.5 Kibana	3	1193	March 2, 2020
Kibana Discovery Regex Kibana	4	12912	October 25, 2019
Kibana Regex Searching Problems Kibana	4	6753	November 23, 2018
Regex pattern to search in kibana Kibana	3	1561	May 6, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Kibana and old beast regexp searches

Related topics