# Regex query don't work in kibana but elasticsearch run very well

**URL:** https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727
**Category:** Kibana
**Created:** [March 8, 2016, 3:17am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727 "2016-03-08T03:17:11Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![whybangbang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whybangbang/32/7116_2.png) [@whybangbang](https://discuss.elastic.co/u/whybangbang)
#### Post date: [March 8, 2016, 3:17am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/1 "2016-03-08T03:17:11Z")

</div>

i run a regex query in kibana ,but no result ,then run the same regex in elasticsearch and run very well

 ![](https://us1.discourse-cdn.com/elastic/original/2X/1/1890fcdee6c3d336d54b8e411aba2c2276cbb1de.png)  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/68c17fd40ab238bc026ebc91153cb83f20aa7661.png)  
i have run [rf\_tag:/._RFI\_._/] [rf\_tag:"/._RFI\_._/"] [rf\_tag:"._RFI\_._"] and so on but no one work

es regex query [https://www.elastic.co/guide/en/elasticsearch/reference/current//query-dsl-query-string-query.html#\_regular\_expressions](https://www.elastic.co/guide/en/elasticsearch/reference/current//query-dsl-query-string-query.html#_regular_expressions)

kibana 4.3 es 2.1

---

<div class="post-metadata">

### Author: ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)
#### Post date: [March 9, 2016, 5:50am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/2 "2016-03-09T05:50:58Z")

</div>

What's your mapping for the "rf\_tag" field in Kibana index pattern? Could you show a screenshot of that?

---

<div class="post-metadata">

### Author: ![whybangbang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whybangbang/32/7116_2.png) [@whybangbang](https://discuss.elastic.co/u/whybangbang)
#### Post date: [March 9, 2016, 6:29am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/3 "2016-03-09T06:29:32Z")

</div>

![](https://us1.discourse-cdn.com/elastic/original/2X/d/d3e5de5fd952ddb6aab9c83abbb50998e3e5b12e.png)  
thank you for your reply.this is "rf\_tag" mapping set

---

<div class="post-metadata">

### Author: ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)
#### Post date: [March 9, 2016, 3:09pm UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/4 "2016-03-09T15:09:26Z")

</div>

The Regexp query is different from regex in the Lucene query syntax, so you may need to play around with that separately: [https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#\_regular\_expressions](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-query-string-query.html#_regular_expressions)

For what you're trying to do, I wonder if you even need a regular expression, you might just be able to use wildcards.

I've had success with the following approach for doing wildcard searches:

- Search against raw (or not\_analyzed) versions of the string
- Use backslash to escape special characters

 ![](https://us1.discourse-cdn.com/elastic/original/2X/c/cde59760f6b61aff85cf85e702fd92e06840259c.png)

---

<div class="post-metadata">

### Author: ![whybangbang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whybangbang/32/7116_2.png) [@whybangbang](https://discuss.elastic.co/u/whybangbang)
#### Post date: [March 10, 2016, 2:48am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/5 "2016-03-10T02:48:47Z")

</div>

thank you ,but i can't get result base regular\_expressions,if kibana have debug mode and i can find kibana'request body to es,and debug this problem

---

<div class="post-metadata">

### Author: ![whybangbang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/whybangbang/32/7116_2.png) [@whybangbang](https://discuss.elastic.co/u/whybangbang)
#### Post date: [March 10, 2016, 7:12am UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/6 "2016-03-10T07:12:27Z")

</div>

@tbragin,medcl have help me solve this problem, this case happen when search uppercase, we can add lowercase\_expanded\_terms:false to search url then run well

---

<div class="post-metadata">

### Author: ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)
#### Post date: [March 13, 2016, 2:18pm UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/7 "2016-03-13T14:18:58Z")

</div>

Thanks for letting us know! Glad you got it resolved.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 1:59pm UTC](https://discuss.elastic.co/t/regex-query-dont-work-in-kibana-but-elasticsearch-run-very-well/43727/8 "2017-07-06T13:59:18Z")

</div>


