# Looking for data in Kibana **URL:** \ **Category:** Logstash\ **Tags:** kql-kibana-query-language\ **Created:** [August 22, 2023, 2:16pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383 "2023-08-22T14:16:55Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Naveen.Bhonagiri](https://avatars.discourse-cdn.com/v4/letter/n/278dde/32.png) [@Naveen.Bhonagiri](https://discuss.elastic.co/u/Naveen.Bhonagiri)\ **Post date:** [August 22, 2023, 2:16pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/1 "2023-08-22T14:16:55Z")
HI Team, I am looking for a help, i am having some devices list (approx 900 devices) which are injecting logs to Elastic, i want help in finding the devices that never sent logs to elastic from my actual devices. If any help it would be helpful. ---
**Author:** ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)\ **Post date:** [August 22, 2023, 9:29pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/2 "2023-08-22T21:29:05Z")
Hello @Naveen.Bhonagiri, Welcome to the community! I'm not sure if I understood your question correctly. Are you trying to search for documents where the `device-logs` field (for example) does not exist? Are you using the Discover app? If this is the case, you can search for documents that do not contain a value for this logs field by typing the following into your Kibana search bar: `not device-logs:*`. Similarly, if you're looking to find documents where a value for the field exists, you can use: `device-logs:*`. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [August 22, 2023, 9:47pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/3 "2023-08-22T21:47:56Z")
> [@Naveen.Bhonagiri](#): > > i want help in finding the devices that never sent logs to elastic from my actual devices Do you mean they send other document, but not these logs? That's doable, as @Priscilla_Parodi said, but if you want the set of devices for which there are no documents in elastic that is a whole different question.. ---
**Author:** ![Naveen.Bhonagiri](https://avatars.discourse-cdn.com/v4/letter/n/278dde/32.png) [@Naveen.Bhonagiri](https://discuss.elastic.co/u/Naveen.Bhonagiri)\ **Post date:** [August 23, 2023, 2:53pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/4 "2023-08-23T14:53:10Z")
HI Team, I am looking for the devices logs in elastic that were not injected till date. is there any chance for that ---
**Author:** ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)\ **Post date:** [August 23, 2023, 3:36pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/5 "2023-08-23T15:36:55Z")
In this case, if you don't have any documents in Elasticsearch for these devices and your goal is to filter and visualize these documents, it's ideal to have some kind of input (other fields) for devices that don't have logs when inserting documents into Elastic. This way, you'll be able to filter them in the Discover app as mentioned. ---
**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\ **Post date:** [August 23, 2023, 8:41pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/6 "2023-08-23T20:41:46Z")
You can make unique list by hostname in Kibana, export in csv, and compare with your list. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 20, 2023, 8:42pm UTC](https://discuss.elastic.co/t/looking-for-data-in-kibana/341383/7 "2023-09-20T20:42:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.