# Match\_phrase query's result do not contain required keyword

**URL:** <https://discuss.elastic.co/t/match-phrase-querys-result-do-not-contain-required-keyword/42574>\
**Category:** Elasticsearch\
**Created:** [February 24, 2016, 10:02am UTC](https://discuss.elastic.co/t/match-phrase-querys-result-do-not-contain-required-keyword/42574 "2016-02-24T10:02:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hacksign](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hacksign/32/5918_2.png) [@Hacksign](https://discuss.elastic.co/u/Hacksign)\
**Post date:** [February 24, 2016, 10:02am UTC](https://discuss.elastic.co/t/match-phrase-querys-result-do-not-contain-required-keyword/42574/1 "2016-02-24T10:02:38Z")

</div>

Search statement:  
{  
"size":30,  
"query" : {  
"match" : {  
"log._kv_" : {  
"query" : "scans microsoft backdoor",  
"operator" : "and",  
"type" : "phrase",  
"slop" : 7  
}  
}  
},  
"highlight" : {  
"fields" : {  
"log._kv_" : {  
"fragment\_size" : 1500, "number\_of\_fragments" : 30  
}  
}  
}  
}  
below are all items containing string 'microsoft':  
'log': [...,  
{"_value_":"False","_type_":"bool","_key_":["scans","Microsoft","detected"],"_kv_":["scans","Microsoft","detected","False"]},  
{"_value_":"1.1.12400.0","_type_":"unicode","_key_":["scans","Microsoft","version"],"_kv_":["scans","Microsoft","version","1.1.12400.0"]},  
{"_value_":"None","_type_":"NoneType","_key_":["scans","Microsoft","result"],"_kv_":["scans","Microsoft","result","None"]},  
{"_value_":"20160221","_type_":"unicode","_key_":["scans","Microsoft","update"],"_kv_":["scans","Microsoft","update","20160221"]},  
...]

my problem :

- there is no backdoor str in result, but my search statement required it
- there is no highlight section in result which I required it too

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:13pm UTC](https://discuss.elastic.co/t/match-phrase-querys-result-do-not-contain-required-keyword/42574/2 "2017-07-05T23:13:58Z")

</div>