In Kibana chart I want to filter 'url' field that starts with string CANCELLED so I wrote a regex: ^CANCELLED.* but when I use filter in Discover tab then I notice that filter doesn't work properly because it also accepts urls with phrase CANCELLED inside of an url. Is it because Kibana regex uses …

Hi Michael, if you want to use a regex in the query you have to surround it in forward slashes (like common in many programming languages). Also since I assume you want to add the period for matching anything. url:/CANCELLED.*/ Also in your specific case, you are not actually needing a regex and …

Discuss the Elastic Stack

Kibana filter regex 'string starts with' doesn't work

Elastic Stack Kibana

MichaelDz (Michael) May 11, 2018, 9:50am 6

Are you saying that it's impossible to add regex filters to a chart? Are filters in logstash only workaround?

Regular Expression Query DSL

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.