# Must\_not usage

**URL:** <https://discuss.elastic.co/t/must-not-usage/197883>\
**Category:** Elasticsearch\
**Created:** [September 3, 2019, 2:39pm UTC](https://discuss.elastic.co/t/must-not-usage/197883 "2019-09-03T14:39:27Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dbonnin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dbonnin/32/106053_2.png) [@dbonnin](https://discuss.elastic.co/u/dbonnin)\
**Post date:** [September 3, 2019, 2:39pm UTC](https://discuss.elastic.co/t/must-not-usage/197883/1 "2019-09-03T14:39:27Z")

</div>

I have this query:

{  
"query": {  
"bool" : {  
"filter" : {  
"term" : { "status" : "404" }  
},  
"must\_not":{  
"term": {"url": "/server-status?auto="}  
}  
}  
}  
}

I want to retrieve all documents with status = 404, but not having url = "/server-status?auto="

However, docs with that url are still included in the results.

---

<div class="post-metadata">

**Author:** ![wangqinghuan](https://avatars.discourse-cdn.com/v4/letter/w/d26b3c/32.png) [@wangqinghuan](https://discuss.elastic.co/u/wangqinghuan)\
**Post date:** [September 4, 2019, 1:54am UTC](https://discuss.elastic.co/t/must-not-usage/197883/2 "2019-09-04T01:54:29Z")

</div>

Is the field 'status' and 'url' keyword datatype? If not set keyword type explicitly, you should add '.keyword' suffix for field, 'status.keyword' and 'url.keyword'

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 2, 2019, 1:54am UTC](https://discuss.elastic.co/t/must-not-usage/197883/3 "2019-10-02T01:54:36Z")

</div>

Closed on October 2, 2019, 1:54am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.