Kibana Discover: User regexp/wildcard in search bar

Elastic Stack Kibana
1

I'm using Kibana's Discover page to find some data in my application. It's working find, but when I want to find something like this:

app_message: "You are the /\d/ user in our system"

I can't catch it properly.

I was also trying something like these:

app_message: "You are the /[0-9]+/ user in our system"
app_message: "You are the \d user in our system"
app_message: "You are the [1 TO *] user in our system"
app_message:/.You are the [0-9]+ . user in our system"

and so on..

But it doesn't work. So, is there any possible way to find this string?
NOTE: I want to find full string, not just a number, etc.

From my "Management" page:
app_message is searchable and analyzed.

From Advanced Settings page:
query:queryString:options has { "analyze_wildcard": true }

Any ideas?

2

Try removing the quotes. app_message.raw: You are the /[0-9]+/ user in our system worked for me

1 Like
3

What is raw property here?
It works strange for me..

If I use:
app_message.raw: You are the
It matched a lot of are the messages (without full matching).

If I use:
app_message: You are the /[0-9]+/
it matches a lot of numbers. Also without full matching.

4

Hi @Pavlo_Ivanchyshyn
try this: app_message: .*the.*user.*

5

It doesn't work for some reason.

6

Guys, any ideas what may be wrong?

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.