# Question about behavior of query\_string

**URL:** <https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193>\
**Category:** Elasticsearch\
**Created:** [March 2, 2018, 5:34am UTC](https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193 "2018-03-02T05:34:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tao\_Liu1](https://avatars.discourse-cdn.com/v4/letter/t/47e85d/32.png) [@Tao\_Liu1](https://discuss.elastic.co/u/Tao_Liu1)\
**Post date:** [March 2, 2018, 5:34am UTC](https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193/1 "2018-03-02T05:34:40Z")

</div>

Hi,

I was searching for multiple fields in Kibana and I knew that the search string would be part of the query\_string. However, there are something I don't fully understand.

When I use an empty string like `status:""`, Kibana will give me nothing. However, if I combine it with a non-empty string search for another field, like `serviceName:"abc" AND status:""`, it will return the result of `serviceName:"abc"` and seems to ignore the `status:""`. It will be the same if I put characters like `*` inside, as `status:"*"`.

This really puzzles me. I will be more than grateful if anyone can help me to sort it out. Thank you so much.

Tao

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 30, 2018, 5:48am UTC](https://discuss.elastic.co/t/question-about-behavior-of-query-string/122193/2 "2018-03-30T05:48:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.