Quering for a value between two strings

Hey All,
Sorry if this has been asked befower, I don´t know how to search for it.
But basically I want to match events based on a value in between two tags:

response: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
        <ResponseMessage>Invalid token</ResponseMessage>

I need to be able to target any events that contains:


With any number except from 1000.

Any ideas?

Best way would be to parse the data in the document into separate fields before indexing them into Elasticsearch.

I know, but at them moment I don´t have the time to mess with the grok filter and all the testing that requires.
We handle a high volume incoming data, and a change in performance could be catastrophic.
Is there a way to do it in kibana for now?

I can’t think of any way right now.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.