Kibana : How to search a value in JSON field

Elastic Stack Kibana
1

Hello .I would like to searck in kibana all documents that contains this specific value Y100000005 . So , i tried in search bar :
image

But Kibana dosen't return Any document!
I have in kibana the document below (it contains Y100000005), i think because this value is within a json string field(data.request.body) ?

data.request.body
{"id":null,"href":"/PO/20005","brand":"undefined","completionDate":null,"description":null,"expectedCompletionDate":"null","externalId":[{"id":"null","system":"null"},{"id":"Y100000005","system":"undefined"}],"orderManagementSystem"......}

Any help is appreciated

2

Could you provide the mapping for the field you're trying to query? And also provide the version of Kibana you're using?

3

I am using the version 7.10.2 and the mapping for the field data.request.body is :
"data" : {
"properties" : {
"request" : {
... ,
"body" : {
"type" : "keyword",
"ignore_above" : 1024
},....

Thanks

4

here the exact mapping :
{
"app-2023.07.20" : {
"mappings" : {
"data.request.body" : {
"full_name" : "data.request.body",
"mapping" : {
"body" : {
"type" : "keyword",
"ignore_above" : 1024
}
}
}
}
}
}

5

You mentioned this value was inside of a JSON object... do you mind providing the actual complete document (of course removing any fields you do not wish to share)?

7

here the complete document :

{
  "_index": "app-2023.07.20",
  "_type": "_doc",
  "_id": "qSr8cokBmngJ7HRh7yXz",
  "_version": 1,
  "_score": null,
  "_source": {
    "@timestamp": "2023-07-20T11:08:30.650Z",
    "data.app": {
      "puc": "yes",
      "site": 4
    },
    "data": {
      "methode": "POST",
      "docker": {
        "id": "2d917e0cb2eac67169638ee055f0081983daead97bb87e4f73f8d61d6d7b532l",
        "image": "null-null-virt-docker-unstable.popfr1.repos.tech.null/null:qpm-demo",
        "name": "null-qpm-demo.1.vjxvx7cgohf8fivm8m5uxppy8",
        "service": "null-qpm-demo"
      },
      "request": {
        "X-null-Application-Id": "[null]",
        "X-null-Origin": "[null]",
        "X-null-Transaction-Id": "[6e739522-278d-4985-bc90-e0a151bfbfh7]",
        "URI": "http://null-qpm-demo:8080/null/productOrders",
        "body": "{\"id\":null,\"href\":\"/productOrders/20005039000000001\",\"brand\":\"null\",\"completionDate\":null,\"description\":null,\"expectedCompletionDate\":\"2023-02-05T23:00:00.000Z\",\"externalId\":[{\"id\":\"20005039000000001\",\"system\":\"null\"},{\"id\":\"Y100000005\",\"system\":\"null\"}],\"orderManagementSystem\":\"null\",\"orderDate\":\"2023-01-31T16:09:12.362Z\",\"receptionDate\":\"2023-01-31T16:09:12.362Z\",\"requestedCompletionDate\":null,\"requestedStartDate\":\"2023-01-31T16:09:12.362Z\",\"requestedTerminationDate\":null,\"publicAccessIdentification\":[],\"agreement\":[{\"cid\":null,\"agreementItem\":[{\"agreementItemIdentification\":[],\"agreementAlteration\":null,\"cidList\":[],\"attachment\":[{\"type\":\"Contrats\",\"validationType\":\"Validé Double clic\",\"validationDate\":\"2023-01-31T16:00:30.000Z\",\"documents\":[{\"type\":\"Document contractuel\",\"attributes\":[{\"code\":\"Id Contratoo\",\"value\":\"les-offres-null-null_rc_4089.pdf\"}]},{\"type\":\"Document contractuel\",\"attributes\":[{\"code\":\"Id Contratoo\",\"value\":\"null-et-vous_cg_3187.pdf\"}]},{\"type\":\"Document contractuel\",\"attributes\":[{\"code\":\"Id Contratoo\",\"value\":\"les-offres-null-null_cg_929.pdf\"}]},{\"type\":\"Document contractuel\",\"attributes\":[{\"code\":\"Id Contratoo\",\"value\":\"les-offres-null-null_fit_3788.pdf\"}]}]},{\"type\":\"MANDAT_OFFRE\",\"validationType\":\"Signature Electronique Simple\",\"validationDate\":\"2023-01-31T16:02:10.000Z\",\"documents\":[{\"type\":\"OTP\",\"attributes\":[{\"code\":\"moyen de contact\",\"value\":\"SMS\"},{\"code\":\"Valeur du moyen de contact\",\"value\":\"0634170777\"}]},{\"type\":\"Informations mandat\",\"attributes\":[{\"code\":\"RUM\",\"value\":\"EPCB202301318522057\"},{\"code\":\"ID transaction\",\"value\":\"20230131170143-UgKjaTVUV9Q0PPXuF\"}]}]}]}]}],\"orderOrigin\":{\"applicationOrigin\":\"ESOFT\",\"externalReference\":[{\"value\":\"ESOFT_MSH\",\"valueDescription\":null,\"system\":\"33I\"}],\"captureContext\":[]},\"reason\":{\"globalReason\":\"add\",\"externalReference\":[]},\"state\":null,\"channel\":[{\"salePlace\":{\"id\":\"PDV-MYSHOP\",\"name\":null,\"externalReference\":[{\"value\":\"VnullAL_PC7\",\"valueDescription\":null,\"system\":\"null\"}]},\"name\":\"SCC\",\"role\":\"submitChannel\"}],\"orderTotalPrice\":[],\"payment\":[{\"id\":\"EPCB2-20230131-164889960-1000000\",\"name\":null,\"payer\":{\"@type\":\"Individual\",\"role\":\"payer\",\"marketSegment\":null,\"relevantMarket\":null,\"externalReference\":[],\"contactMedium\":[{\"@type\":\"PostalAddress\",\"@baseType\":\"ContactMedium\",\"@type\":\"PostalAddress\",\"validFor\":null,\"roleValidFor\":null,\"externalReference\":[],\"details\":[{\"@type\":\"PostalAddressLines\",\"postalCode\":\"62000\",\"city\":\"ARRAS\",\"country\":\"FRA\",\"countryCode\":null,\"@baseType\":\"PostalAddressRef\",\"@type\":\"PostalAddressLines\",\"line1\":\"1 place de l'Ancien Rivage\",\"line2\":\"***\",\"line3\":\"***\",\"line4\":\"***\"}]}],\"@baseType\":\"RelatedParty\",\"@type\":\"Individual\",\"@referredType\":null,\"fullName\":null,\"lastName\":null,\"firstName\":null,\"civility\":null,\"birthDate\":null,\"birthLocality\":null,\"birthDepartment\":null,\"birthCountry\":null,\"activity\":null,\"isProfessional\":null,\"individualIdentification\":[]},\"characteristic\":[]}],\"billingAccount\":{\"name\":null,\"accountDetails\":{\"bankNumber\":\"10278\",\"bankCounter\":\"00148\",\"accountNumber\":\"PGGYIFO9901\",\"accountKey\":\"36\",\"accountOwner\":\"null BAROU\",\"accountDomiciliation\":null,\"address1\":null,\"address2\":null,\"address3\":null,\"address4\":null,\"postalCode\":null,\"city\":null},\"externalReference\":[]},\"linkedProductOrder\":null,\"note\":[],\"relatedParty\":[{\"@type\":\"Individual\",\"role\":\"customer\",\"marketSegment\":\"Residential\",\"relevantMarket\":null,\"externalReference\":[{\"id\":\"1632898136\",\"system\":\"null\",\"codeDR\":null,\"isRTC\":null}],\"contactMedium\":[],\"@baseType\":\"RelatedParty\",\"@type\":\"Individual\",\"@referredType\":null,\"fullName\":null,\"lastName\":\"BAROU\",\"firstName\":\"null\",\"civility\":\"M\",\"birthDate\":\"1987-06-12\",\"birthLocality\":\"ARRAS\",\"birthDepartment\":\"62\",\"birthCountry\":null,\"activity\":null,\"isProfessional\":null,\"individualIdentification\":[]},{\"@type\":\"Individual\",\"role\":\"seller\",\"marketSegment\":null,\"relevantMarket\":null,\"externalReference\":[],\"contactMedium\":[],\"@baseType\":\"RelatedParty\",\"@type\":\"Individual\",\"@referredType\":\"user\",\"fullName\":null,\"lastName\":null,\"firstName\":null,\"civility\":null,\"birthDate\":null,\"birthLocality\":null,\"birthDepartment\":null,\"birthCountry\":null,\"activity\":null,\"isProfessional\":null,\"individualIdentification\":[{\"identificationType\":\"cuid\",\"identificationId\":\"MMMM9286\"}]},{\"@type\":\"Individual\",\"role\":\"contact\",\"marketSegment\":null,\"relevantMarket\":null,\"externalReference\":[],\"contactMedium\":[{\"@type\":\"EMailAddress\",\"@baseType\":\"ContactMedium\",\"@type\":\"EMailAddress\",\"address\":\"null.barou@gmail.com\"},{\"@type\":\"PhoneNumber\",\"@baseType\":\"ContactMedium\",\"@type\":\"PhoneNumber\",\"phoneType\":\"null\",\"number\":\"0634170777\"}],\"@baseType\":\"RelatedParty\",\"@type\":\"Individual\",\"@referredType\":null,\"fullName\":null,\"lastName\":null,\"firstName\":null,\"civility\":null,\"birthDate\":null,\"birthLocality\":null,\"birthDepartment\":null,\"birthCountry\":null,\"activity\":null,\"isProfessional\":null,\"individualIdentification\":[]}],\"orderItem\":[{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"OC50000000460\",\"externalId\":[{\"id\":\"6T07V\",\"system\":\"null\"}],\"name\":\"HDM 5G\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":\"postpaid\"},\"product\":null,\"orderItem\":[{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"AOSO_REMISE_null_RENTREE_WEB_2017\",\"externalId\":[],\"name\":\"Remise nouveau client null\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PSSOREMISE_WEB_2017\",\"version\":null,\"name\":\"PSSOREMISE_WEB_2017\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"F_FORCE_ADD\",\"name\":\"Valeur force add\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_ACTIVATION\",\"name\":\"Prise en compte\",\"value\":\"VF_IMMEDIAT\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_CODE_SO\",\"name\":\"code SO en parc\",\"value\":\"EP248\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_COMPATIBLE\",\"name\":\"SO COMPATIBLE\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_FLAG_ACTIVATION\",\"name\":\"Flag activation\",\"value\":\"VF_OUI\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_TYPE_OPTION\",\"name\":\"Type option\",\"value\":\"VF_OPTION_MOB_STANDARD\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_DATE_ACTIVATION\",\"name\":\"Date d'activation\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]},{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"O_PORTA_null\",\"externalId\":[],\"name\":\"Portabilité du numéro null\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PS_PORTA_null\",\"version\":null,\"name\":\"Portabilité du numéro null\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"FONC50000000042\",\"name\":\"RIO null donneur\",\"value\":\"02P09TEZB65S\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"FONC50000000043\",\"name\":\"Date de portage\",\"value\":\"2023-02-11\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"FONC50000000060\",\"name\":\"conserver\",\"value\":\"0634170844\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_ETAT_PORTA_LM\",\"name\":\"Etat de portabilité du numéro null\",\"value\":\"VF_EXTERNE\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_CIVIL_NOM\",\"name\":\"Nom et prénom\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]},{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"AOSOALROU\",\"externalId\":[],\"name\":\"Le client ne souhaite aucune parution annuaire\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PSSOALROU\",\"version\":null,\"name\":\"Le client ne souhaite aucune parution annuaire\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"F_FORCE_ADD\",\"name\":\"Valeur force add\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_ACTIVATION\",\"name\":\"Prise en compte\",\"value\":\"VF_IMMEDIAT\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_CODE_SO\",\"name\":\"code SO en parc\",\"value\":\"ALROU\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_COMPATIBLE\",\"name\":\"SO COMPATIBLE\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_FLAG_ACTIVATION\",\"name\":\"Flag activation\",\"value\":\"VF_OUI\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_TYPE_OPTION\",\"name\":\"Type option\",\"value\":\"VF_OPTION_MOB_STANDARD\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_DATE_ACTIVATION\",\"name\":\"Date d'activation\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]},{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"AOSORM295\",\"externalId\":[],\"name\":\"Le client ne souhaite aucune parution annuaire\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PSSORM295\",\"version\":null,\"name\":\"Le client ne souhaite aucune parution annuaire\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"F_FORCE_ADD\",\"name\":\"Valeur force add\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_ACTIVATION\",\"name\":\"Prise en compte\",\"value\":\"VF_IMMEDIAT\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_CODE_SO\",\"name\":\"code SO en parc\",\"value\":\"RM295\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_COMPATIBLE\",\"name\":\"SO COMPATIBLE\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_FLAG_ACTIVATION\",\"name\":\"Flag activation\",\"value\":\"VF_OUI\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_TYPE_OPTION\",\"name\":\"Type option\",\"value\":\"VF_OPTION_MOB_STANDARD\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_DATE_ACTIVATION\",\"name\":\"Date d'activation\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]},{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"AOSOPREFC\",\"externalId\":[],\"name\":\"Facture électronique\",\"category\":\"null\",\"subCategory\":[\"customerOption\"],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PSSOPREFC\",\"version\":null,\"name\":\"Facture electronique\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"F_FORCE_ADD\",\"name\":\"Valeur force add\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_ACTIVATION\",\"name\":\"Prise en compte\",\"value\":\"VF_IMMEDIAT\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_CODE_SO\",\"name\":\"code SO en parc\",\"value\":\"PREFC\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_COMPATIBLE\",\"name\":\"SO COMPATIBLE\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_EMAIL\",\"name\":\"Adresse e-mail\",\"value\":\"null.barou@gmail.com\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_FACTEL\",\"name\":\"Type de facture\",\"value\":\"VF_DCOURT\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_FLAG_ACTIVATION\",\"name\":\"Flag activation\",\"value\":\"VF_OUI\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_NOTIF_SMS\",\"name\":\"Souhaitez-vous la notification sur votre null ?\",\"value\":\"VF_NON\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_NOTIF_MSISDN\",\"name\":\"null de notification\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SO_DATE_ACTIVATION\",\"name\":\"Date d'activation\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]},{\"id\":null,\"action\":\"add\",\"quantity\":1,\"itemPrice\":[],\"payment\":[],\"productOffering\":{\"id\":\"O_CONTRAT_null\",\"externalId\":[],\"name\":\"Contrat null\",\"category\":\"null\",\"subCategory\":[],\"offerBillingType\":null},\"product\":{\"id\":null,\"localEAN13\":null,\"requestedStartDate\":null,\"requestedTerminationDate\":null,\"productSpecification\":{\"id\":\"PS_CONTRAT_null\",\"version\":null,\"name\":\"Contrat null\"},\"productPrice\":[],\"place\":[],\"characteristic\":[{\"code\":\"F_CODE_OT\",\"name\":\"Code offre null\",\"value\":\"6T07V\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DATE_DEBUT_ENGT\",\"name\":\"Date de début d'engagement\",\"value\":\"2023-01-31\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DATE_FIN_ENGT\",\"name\":\"Date de fin d'engagement\",\"value\":\"2023-01-31\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DUREE_ENGT\",\"name\":\"Durée d'engagement\",\"value\":\"VF_0\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_LIB_OT\",\"name\":\"Libellé offre null\",\"value\":\"Forfait 140 Go 5G version SIM sans engagement\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_NATURE_OFFRE_CIBLE\",\"name\":\"F_NATURE_OFFRE_CIBLE\",\"value\":\"postpaid\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_OPS_OC\",\"name\":\"code OPS de l'OC\",\"value\":\"OC50000000460\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_OPS_TYPEOFFRE\",\"name\":\"code OPS du type d'offre (VF)\",\"value\":\"DOC00000000000001846\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SEGCO\",\"name\":\"segment commercial\",\"value\":\"T07PL\",\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_LIB_OT_FUTURE\",\"name\":\"Libellé offre null future\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DCL_NUM\",\"name\":\"code déclinaison des forfaits bloqués/prépayés\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_OFFER_ID\",\"name\":\"offer ID (new ocs)\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_NATURE_OFFRE_SOURCE\",\"name\":\"F_NATURE_OFFRE_SOURCE\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_STATUT_DOSSIER\",\"name\":\"état du dossier null\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_TYPE_MIGRATION\",\"name\":\"Type migration\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_ID_SACHEM\",\"name\":\"identifiant client sachem / forfait bloqué\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_MSISDN\",\"name\":\"msisdn du client\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_OPS_FCTTYPEOFFRE\",\"name\":\"Fonction type offre\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SERVICE_CLASS\",\"name\":\"service class (new ocs)\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DATE_FACTURE\",\"name\":\"Date de début de l'offre\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_NUMCLIENT\",\"name\":\"numéro du client\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_DOSSIER_null\",\"name\":\"Identifiant dossier\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_CODE_OT_FUTURE\",\"name\":\"Code offre null future\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_CLIENT_null\",\"name\":\"Identifiant client\",\"value\":null,\"valueDescription\":null,\"oldValue\":null},{\"code\":\"F_SVA_CODE\",\"name\":\"code service\",\"value\":null,\"valueDescription\":null,\"oldValue\":null}],\"relatedParty\":[],\"realizingResource\":[]},\"orderItem\":[]}]}],\"vadData\":{\"nsce\":\"2141382630739\",\"imei\":\"\",\"agreementDate\":\"2021-12-01T00:00:00.000Z\",\"isAgreementReceived\":\"O\",\"isAgreementChecked\":\"O\",\"paiementType\":\"PO\",\"ias\":\"null\"}}"
      },
      "application": "api-null",
      "idTransaction": "0a91f091-6951-4516-8541-3b06580bf9k5"
    },
    "level": "ERROR",
    "docker": {},
    "data.tag": {
      "env": "qua"
    },
    "log": {
      "offset": 0,
      "file": {
        "path": "/var/lib/docker/volumes/null-qpm-demo.1.vjxvx7cgohf8fivm8m5uxppj9/_data/null-null-flow_json.log"
      }
    },
    "logger": "null_ORDER_FLOW_LOGGER"
  },
  "fields": {
    "@timestamp": [
      "2023-07-20T11:08:30.650Z"
    ]
  },
  "highlight": {
    "data.idTransaction": [
      "@kibana-highlighted-field@0a91f091-6951-4516-8541-3b06580bf8d9@/kibana-highlighted-field@"
    ]
  },
  "sort": [
    1689851310659
  ]
}
8

In the mapping for this field, you have an ignore_above value:

This means that values above 1024 characters will not be searchable. You can either increase this value or use a text field (instead of keyword). If you want to search other values in this field, specifying it as a text field will be much more performant than using the keyword with wildcards.

9

Sorry, forgot to mention that, in your given document, the value for data.request.body is much longer than 1024 characters.

10

Thanks for your response ; i appreciated it.
I haven't found yet how to change the mapping of a field in kibana .is it via a request in dev tools? thanks in advance

11

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.