# Problem with SQL query when using RLIKE or LIKE function

**URL:** <https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689>\
**Category:** Kibana\
**Tags:** elastic-stack-sql\
**Created:** [June 1, 2021, 10:36pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689 "2021-06-01T22:36:24Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![simran96](https://avatars.discourse-cdn.com/v4/letter/s/aeb1de/32.png) [@simran96](https://discuss.elastic.co/u/simran96)\
**Post date:** [June 1, 2021, 10:36pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/1 "2021-06-01T22:36:24Z")

</div>

Hi I'm trying to write a query where i want to search for a particular pattern but i'm getting errors. I have used the \ escape as well but still its of no use.

My query:  
`curl -XPOST "http://xxxx/_sql?format=csv" -H 'Content-Type: application/json' -d'{ "query" : "SELECT * FROM my_table WHERE type RLIKE \".*ECC.*\"", "fetch_size": 10000 }' > tmp.table`

ERROR :  
` {"error":{"root_cause":[{"type":"parsing_exception","reason":"line 1:94: mismatched input 'RLIKE' expecting {<EOF>, 'AND', 'GROUP', 'HAVING', 'LIMIT', 'OR', 'ORDER', LIMIT_ESC}"}],"type":"parsing_exception","reason":"line 1:94: mismatched input 'RLIKE' expecting {<EOF>, 'AND', 'GROUP', 'HAVING', 'LIMIT', 'OR', 'ORDER', LIMIT_ESC}","caused_by":{"type":"input_mismatch_exception","reason":null}},"status":400}`

---

<div class="post-metadata">

**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\
**Post date:** [June 1, 2021, 11:31pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/2 "2021-06-01T23:31:41Z")

</div>

It is always a good idea to start with checking [documentation](https://www.elastic.co/guide/en/elasticsearch/reference/7.9/sql-like-rlike-operators.html#sql-rlike-operator) and trying examples there.

Please also check this [note](https://www.elastic.co/guide/en/elasticsearch/reference/7.9/sql-lexical-structure.html#sql-syntax-single-vs-double-quotes) about using double vs single quotes.

The last piece of this puzzle, is how do we escape apostrophe on command line. For that we need to take a look at bash documentation or find an answer on [stack overflow](https://superuser.com/a/883858).

So, with these important pieces of information in mind, we can rewrite your query into something that works:

```auto
curl -XPOST "http://xxxx/_sql?format=csv" -H 'Content-Type: application/json' -d'{ "query": "SELECT * FROM my_table WHERE type RLIKE '\''.*ECC.*'\'' ", "fetch_size": 10000}' > tmp.table

```

Alternatively, you can use kibana console that makes all this escaping much simpler and once you have a working statement you can copy it as a curl command.

---

<div class="post-metadata">

**Author:** ![simran96](https://avatars.discourse-cdn.com/v4/letter/s/aeb1de/32.png) [@simran96](https://discuss.elastic.co/u/simran96)\
**Post date:** [June 1, 2021, 11:36pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/3 "2021-06-01T23:36:31Z")

</div>

`{"error":{"root_cause":[{"type":"x_content_parse_exception","reason":"[1:14] [sql/query] failed to parse object"}],"type":"x_content_parse_exception","reason":"[1:14] [sql/query] failed to parse object","caused_by":{"type":"json_parse_exception","reason":"Unexpected character ('t' (code 116)): was expecting double-quote to start field name\n at [Source: (org.elasticsearch.common.bytes.AbstractBytesReference$MarkSupportingStreamInputWrapper); line: 1, column: 134]"}},"status":400}`

it gave me above error

---

<div class="post-metadata">

**Author:** ![simran96](https://avatars.discourse-cdn.com/v4/letter/s/aeb1de/32.png) [@simran96](https://discuss.elastic.co/u/simran96)\
**Post date:** [June 1, 2021, 11:42pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/4 "2021-06-01T23:42:51Z")

</div>

i tried double quotes as well but its still not working.

---

<div class="post-metadata">

**Author:** ![Igor\_Motov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/igor_motov/32/45193_2.png) [@Igor\_Motov](https://discuss.elastic.co/u/Igor_Motov)\
**Post date:** [June 1, 2021, 11:44pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/5 "2021-06-01T23:44:42Z")

</div>

Did you try to copy and paste exactly what I posted? `'\''` contains 3 single apostrophes and no double quotes. Which shell do you run this in?

---

<div class="post-metadata">

**Author:** ![simran96](https://avatars.discourse-cdn.com/v4/letter/s/aeb1de/32.png) [@simran96](https://discuss.elastic.co/u/simran96)\
**Post date:** [June 1, 2021, 11:48pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/6 "2021-06-01T23:48:27Z")

</div>

it worked. Thanks. i was running something wrong. U did a great help!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 29, 2021, 11:48pm UTC](https://discuss.elastic.co/t/problem-with-sql-query-when-using-rlike-or-like-function/274689/7 "2021-06-29T23:48:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
