{"match": {"region": "EAST"}}

[Mahesh_Bablu]

Index privileges

Hi there I was trying to give access to user with this query. "{ "match": { "path.raw": { "query": "/var/log/top10/customer.log", "type": "phrase" } } }" I would like log in and directly get all info about it "customer.log". Can you help me? Greetings

reference

Can anyone please tell me the query for not matching.
Like I need {"match": {"region": "EAST"}} exactly opposite.
Eg: match regions without EAST

[spinscale (Alexander Reelsen)]

This is not really an x-pack issue, I will move this over to Elasticsearch.

Furthermore take a look at the bool query, specifically the must_not part.

--Alex

[Mahesh_Bablu]

Yes, I had tried with must_not but it is throwing the error **Visualize: [must_not] query malformed, no start_object after query name
**

query I wrote is {"must_not": [{"match": {"attr_details.keyword": "Sales"}}]}