Kibana string search

Elastic Stack Kibana
#1

I cant filter for SC
tried:
:SC:: nothing
SC nothing
:SC: nothing
"SC" nothing

How do I find "SC" in this string?

CDR|N|09:11:2020 09:00:06:939|BIG|20010|boat02|30862|35|BIG_InitiateSMS|_sngtv_|02-P35-09112:SC:BIG:46663597:164746800:092020090693::

Thank you

#2

I would recommand to parse correctly your CDR using a simple grok
if your cdr is indexed in one field as a text you can try *SC*

#3

Thank you *SC* is getting me closer.

Interesting you mentioned GROK, I see that my GROK filter is not being applied and secondly I was looking DISSECT because the variations in the message were getting tough to parse with GROK.

#4

Yes dissect is a good and simple when you don't need regular expressions,
otherwise grok is very powerful

#5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.