Match Phrase Prefix Issue


(Manikandan Selva) #1

Hi

Capture1

{
   "query":{
      "dis_max":{
         "queries":[
            {
               "match_phrase_prefix":{
                  "message":"12/Mar/2019"
               }
            },
            {
               "match_phrase_prefix":{
                  "message":"2019-03-12"
               }
            },
            {
               "match_phrase_prefix":{
                  "message":" Mar 12 "
               }
            }
         ]
      }
   }
}

Above Query is my filter dashboard query in kibana but, i also get following data in result 2019:03:12 (time data - figure 2 ) i expect only figure 3 data only .

This issue also in search Query Ex : Search is .....AND message:("2019-03-13") But I got also given field of data in search result [14/Mar/2019:03:13:57 +0000]


(Josh Dover) #2

I'm having a hard time understanding exactly what's going on here.

  • Where are you using this query?
  • What results are you expecting and what are you getting back? Screenshots and concrete examples are helpful.
  • What things have you already tried when looking for a solution?

Also, please don't post unformatted code as it's very hard to read.

Instead paste the text and format it with </> icon, and check the preview
window to make sure it's properly formatted before posting it. This makes it
more likely that your question will receive a useful answer.

Be sure to copy and paste exactly the code you're using in Kibana to make it easier for others to spot possible mistakes.

It would be great if you could update your post to solve this. Thanks!