I have a need to query the logs in Elasticsearch through Kibana in a certain way that I will explain soon. I'll try my best to explain what I'm looking for and hopefully someone can tell me if it is possible via Kibana or whether I should just query elastic directly. I log incoming requests to my s…

first, you are querying elastic directly with dev tools I assume. second, ya, it is not clear what you are after. last, why don't you use _search with a query? optionally use a filter as well. GET /my-index/_search { "query": { "wildcard": { "Message.keyword": { "value": "*Co…

Not sure what is the purpose of your search. Is it getting the ID? Maybe getting all messages with the same ID where one of the messages has the string you are looking for? Here are my steps: I've created an index my-index-000001 with the sample data you provided. GET /my-index-000001/_search {…

Hi AClerk. Thanks for setting up a sample. Using that, I'm hoping to get the following results: { ... "hits" : { ... "hits" : [ { "_index" : "my-index-000001", "_type" : "_doc", "_id" : "DSPYx3cBlAt-jkNjxemk", "_score" : 1.0, "_source" : { …

Sigh, I thought as much. That was what I ended up doing in the end. It gets complicated when the first query returns too much for one page of results and so you have to "paginate" that first and use the outcome of that for your next query. Thanks for the answer and for your patience.

Discuss the Elastic Stack

Query related logs that contain a keyword

Elastic Stack Kibana

AClerk February 23, 2021, 2:31am 6

What you are after is Use query result as parameter for another query in Elasticsearch DSL
Try to see if this helps.
Cheers!

Topic		Replies	Views
Create and show aggregated data Kibana	7	5053	November 24, 2017
How to query multiple fileds in Kibana Elasticsearch kql-kibana-query-language	22	2995	June 9, 2022
Log event correlation with timestamp Kibana	1	2134	July 8, 2016
[Kibana] group by request? Elasticsearch	4	2932	December 23, 2014
Search related documents in kibana in single query Kibana	4	523	August 20, 2023

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Query related logs that contain a keyword

Related topics