# Match\_phrase not giving expected output **URL:** \ **Category:** Elasticsearch\ **Created:** [May 3, 2019, 4:09pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560 "2019-05-03T16:09:57Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![sanjaykirushnan](https://avatars.discourse-cdn.com/v4/letter/s/e480ec/32.png) [@sanjaykirushnan](https://discuss.elastic.co/u/sanjaykirushnan)\ **Post date:** [May 3, 2019, 4:09pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560/1 "2019-05-03T16:09:57Z")
This is my sample json in elastic search ```auto { "_index": "logstash-dds-2019.05.03", "_type": "dds_next", "_id": "AWp-Y_-uIGa9uJGBjmoM", "_version": 1, "_score": null, "_source": { "runDateTime": "2019-05-03 15:48:36", "input_type": "log", "packageId": "c625c475-9341-44d0-9e0b-caf9028d364a", "type": "dds_next", "reRun": "false", "packageName": "Package_Sftp_Customer_ABC", "status": "PACKAGE_COMPLETED" } } ``` When i apply this DSL i don't get any result ```auto { "query": { "bool": { "must": [ { "match_phrase": { "status": "PACKAGE_COMPLETED" } }, { "match_phrase": { "reRun": "false" } }, { "match_phrase": { "packageName": "Package_Sftp_Customer" } }, { "match_phrase": { "runDateTime": "2019-05-03" } } ] } } } ``` But i get output when i try this ```auto { "query": { "bool": { "must": [ { "match_phrase": { "status": "PACKAGE_COMPLETED" } }, { "match_phrase": { "reRun": "false" } }, { "match_phrase": { "runDateTime": "2019-05-03" } } ] } } } ``` Any reason why i am not able to match phrase on packageName? ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 3, 2019, 5:54pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560/2 "2019-05-03T17:54:06Z")
Please format your code, logs or configuration files using `` icon as explained in [this guide](https://discuss.elastic.co/t/about-the-elasticsearch-category/21) and not the citation button. It will make your post more readable. Or use markdown style like: ```` ``` CODE ``` ```` This is the icon to use if you are not using markdown format: ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/e/7e6e239431ec2d71cbf1beef741f2e93e7cc762c.jpg) There's a live preview panel for exactly this reasons. Lots of people read these forums, and many of them will simply skip over a post that is difficult to read, because it's just too large an investment of their time to try and follow a wall of badly formatted text. If your goal is to get an answer to your questions, it's in your interest to make it as easy to read and understand as possible. Please update your post. It depends on the mapping/analyzer you are using. But as you indexed `Package_Sftp_Customer_ABC` It probably does not match. ---
**Author:** ![sanjaykirushnan](https://avatars.discourse-cdn.com/v4/letter/s/e480ec/32.png) [@sanjaykirushnan](https://discuss.elastic.co/u/sanjaykirushnan)\ **Post date:** [May 3, 2019, 6:45pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560/3 "2019-05-03T18:45:37Z")
this data is put in elastic through logstash. > [@dadoonet](#): > > It depends on the mapping/analyzer you are using how will i know what analyzer i am using? The mapping is automatically created by Elasticsearch when the data is first written in index through logstash. > [@dadoonet](#): > > But as you indexed `Package_Sftp_Customer_ABC` It probably does not match. i don't understand what you mean here. Can i do a pattern search for this like `Package_Sftp_Customer_*` if yes what is the query i should use? Can u please explain. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 6, 2019, 12:22pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560/4 "2019-05-06T12:22:12Z")
> [@sanjaykirushnan](#): > > how will i know what analyzer i am using? The mapping will tell you that. If it's a text field without any analyzer defined then it will use [Standard analyzer | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-standard-analyzer.html) > [@sanjaykirushnan](#): > > i don't understand what you mean here. > Can i do a pattern search for this like `Package_Sftp_Customer_*` if yes what is the query i should use? You indexed `"packageName": "Package_Sftp_Customer_ABC"` and you are searching for `"packageName": "Package_Sftp_Customer"`. That obviously not equal. But that might match depending on how the analyzer is processing the text. I'd recommend using the Analyze API to understand what is happening behind the scene. [https://www.elastic.co/guide/en/elasticsearch/reference/current/\_testing\_analyzers.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/_testing_analyzers.html) You can use a Wildcard query but this is slow. Or you can use a edge ngram based analyzer: [Edge n-gram token filter | Elasticsearch Guide [8.11] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-edgengram-tokenfilter.html) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 3, 2019, 12:22pm UTC](https://discuss.elastic.co/t/match-phrase-not-giving-expected-output/179560/5 "2019-06-03T12:22:23Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.