# QueryString to search String with colon

**URL:** <https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369>\
**Category:** Elasticsearch\
**Created:** [April 3, 2020, 9:17am UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369 "2020-04-03T09:17:32Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![gyana\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gyana_nayak/32/56498_2.png) [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Post date:** [April 3, 2020, 9:17am UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/1 "2020-04-03T09:17:33Z")

</div>

i am trying to achieve below condition

loginId = "z2store" and type = "web" and dateTime = "12:17:08"

below query i have written

```auto
GET /sample/_search
{
  "bool" : {
    "must" : [
      {
        "term" : {
          "orgId" : {
            "value" : "z2store",
            "boost" : 1.0
          }
        }
      },
      {
        "term" : {
          "type" : {
            "value" : "web",
            "boost" : 1.0
          }
        }
      },
      {
        "query_string" : {
          "query" : "12:17:08",
          "default_field" : "dateTime",
          "fields" : [],
          "type" : "best_fields",
          "default_operator" : "or",
          "max_determinized_states" : 10000,
          "enable_position_increments" : true,
          "fuzziness" : "AUTO",
          "fuzzy_prefix_length" : 0,
          "fuzzy_max_expansions" : 50,
          "phrase_slop" : 0,
          "escape" : false,
          "auto_generate_synonyms_phrase_query" : true,
          "fuzzy_transpositions" : true,
          "boost" : 1.0
        }
      }
    ],
    "adjust_pure_negative" : true,
    "boost" : 1.0
  }
}

```

below is my java code

```auto
BoolQueryBuilder boolQuery = new BoolQueryBuilder().must(QueryBuilders.termQuery("orgId", orgId))
                        .must(QueryBuilders.termQuery("type", "web"));
QueryStringQueryBuilder builder = new QueryStringQueryBuilder("12:17:08");
                        builder.defaultField("dateTime").queryString();
                        boolQuery.must(builder);
SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder().query(builder)
                        .from((batchNumber - 1) * batchSize).size(batchSize)
                        .sort("@timestamp", SortOrder.DESC);

```

Above query is not working. Any help will be appreciated. I am using elasticSearch 7.4.

---

<div class="post-metadata">

**Author:** ![Mark\_Harwood](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_harwood/32/10538_2.png) [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\
**Post date:** [April 3, 2020, 9:41am UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/2 "2020-04-03T09:41:08Z")

</div>

Hi Gyana.  
See [https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#\_reserved\_characters](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#_reserved_characters)

---

<div class="post-metadata">

**Author:** ![gyana\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gyana_nayak/32/56498_2.png) [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Post date:** [April 3, 2020, 10:08am UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/3 "2020-04-03T10:08:36Z")

</div>

rewrite below query

```auto
{
           "query_string" : {
             "query" : "12\\:\\17\\:\\08",
             "default_field" : "dateTime",
             "fields" : [],
             "type" : "best_fields",
             "default_operator" : "or",
             "max_determinized_states" : 10000,
             "enable_position_increments" : true,
             "fuzziness" : "AUTO",
             "fuzzy_prefix_length" : 0,
             "fuzzy_max_expansions" : 50,
             "phrase_slop" : 0,
             "escape" : false,
             "auto_generate_synonyms_phrase_query" : true,
             "fuzzy_transpositions" : true,
             "boost" : 1.0
           }
         }

```

still getting error. Could you help me to write this.

---

<div class="post-metadata">

**Author:** ![Mark\_Harwood](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_harwood/32/10538_2.png) [@Mark\_Harwood](https://discuss.elastic.co/u/Mark_Harwood)\
**Post date:** [April 3, 2020, 11:28am UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/4 "2020-04-03T11:28:36Z")

</div>

Can you supply

1. The error
2. The document you expect to match
3. The mapping.

Thanks

---

<div class="post-metadata">

**Author:** ![gyana\_nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gyana_nayak/32/56498_2.png) [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\
**Post date:** [April 3, 2020, 3:20pm UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/5 "2020-04-03T15:20:28Z")

</div>

Hi Mark,  
i would able to apply the setting to fix this issue. Thanks for the reply.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 1, 2020, 3:20pm UTC](https://discuss.elastic.co/t/querystring-to-search-string-with-colon/226369/6 "2020-05-01T15:20:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.