Question regarding filtering on field values

Elastic Stack Elasticsearch
1

I would like to query filtering on "fieldname" through POST method.

For example:
field "activity_name" values are below
a) Satisfaction Data_sample
b) Airline Satisfaction Survey_test
c) Airline Satisfaction Survey
d) Satisfaction Data

The below should retrieve documents which has "activity_name" field value contains "Satis" for specified time range. Please suggest me how can we specify it?

{
    "fields": [
        "message",
        "activity_name"
        ],  
    query: {
        "query_string": {
            "query": "type:\"sample\" AND activity_name:\"*Satis*\""
            }
    },
    filter : {
         "range": {
                "@timestamp": {
                    "from": 1463410411109,    
                    "to": 1463414011108
                }
            }
    }
}

I'm expecting to retrieve all 4 documents but the above code didn't return anything.
but I am able to retrieve documents filtered on particular word (eg: Satisfaction) which returns all 4, but not with in between text.

2

Can you simplify the query to narrow it down to which part is failing to match? I.e., is it the *Satis* wildcard, or the range on @timestamp?

Mike McCandless

3

No problem with @timestamp. The wild card *Satis* didn't give any result with the below code. But when i use *Satisfaction* returns all 4 (a,b,c,d) values listed above. I expected to return those 4 values with *Satis* also. How do i specify in query?

                                    {
                                        "fields": [
                                            "message",
                                            "activity_name"
                                            ],  
                                        query: {
                                            "query_string": {
                                                "query": "type:\"sample\" AND activity_name:\"*Satis*\""
                                                }
                                        }
                                    }