Not searching @message field by default (using Kibana)

Elastic Stack Elasticsearch
1

I've updated ES template disabling '_all' field searching and set the
default field to search for as '@message'.
But now when I enter a search-string (from message part of a log) into
Kibana search bar, it doesn't return
any result. I will then have to modify the search as -

@message:"a_string_in_log_message"

to return the expected results. I mean, the query should return results
without including "@message:" along
with the search-string right? Please let me know and I'm attaching my
template also.

Thanks,

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

2

Did you modify the Primary_field setting in KibanaConfig.rb?

On Thursday, May 30, 2013 1:26:49 AM UTC-7, vims wrote:

I've updated ES template disabling '_all' field searching and set the
default field to search for as '@message'.
But now when I enter a search-string (from message part of a log) into
Kibana search bar, it doesn't return
any result. I will then have to modify the search as -

@message:"a_string_in_log_message"

to return the expected results. I mean, the query should return results
without including "@message:" along
with the search-string right? Please let me know and I'm attaching my
template also.

Thanks,

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

3

Solved.

You were right. I had to change Primary_field = '_all' to Primary_field =
'@message'

Thanks,

On Sun, Jun 2, 2013 at 9:56 AM, stoked darrenfoo@gmail.com wrote:

Did you modify the Primary_field setting in KibanaConfig.rb?

On Thursday, May 30, 2013 1:26:49 AM UTC-7, vims wrote:

I've updated ES template disabling '_all' field searching and set the
default field to search for as '@message'.
But now when I enter a search-string (from message part of a log) into
Kibana search bar, it doesn't return
any result. I will then have to modify the search as -

@message:"a_string_in_log_**message"

to return the expected results. I mean, the query should return results
without including "@message:" along
with the search-string right? Please let me know and I'm attaching my
template also.

Thanks,

--
You received this message because you are subscribed to a topic in the
Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/elasticsearch/5AcSejTdxbU/unsubscribe?hl=en-US
.
To unsubscribe from this group and all its topics, send an email to
elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.