# Search across all fields on Kibana

**URL:** <https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499>\
**Category:** Kibana\
**Created:** [December 23, 2020, 2:29pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499 "2020-12-23T14:29:35Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Finley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/finley/32/81314_2.png) [@Finley](https://discuss.elastic.co/u/Finley)\
**Post date:** [December 23, 2020, 2:29pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/1 "2020-12-23T14:29:36Z")

</div>

Hi,

I'm sorry to ask this question but I didn't find anything on google on on the forum concerning this.

I would like to search, on kibana, on all fields with a simple value.

For example, in Discover, into the KQL bar, I would like search across all fields the value "OK" and get the results where the value is "OK".

How to do this ? Do I have to specify all the fields ?

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [December 23, 2020, 3:06pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/2 "2020-12-23T15:06:57Z")

</div>

See if a [simple query string](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-simple-query-string-query.html) works for what you need. The default for `fields` is all but I just put that in for an example. You can specify which fields you want or use all.

```auto
POST INDEX/_search
{
    "query": {
        "simple_query_string" : {
            "query": "Query String Goes Here",
            "fields": ["*"]
        }
    }
} 

```

---

<div class="post-metadata">

**Author:** ![Finley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/finley/32/81314_2.png) [@Finley](https://discuss.elastic.co/u/Finley)\
**Post date:** [December 23, 2020, 3:20pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/3 "2020-12-23T15:20:36Z")

</div>

> [@aaron-nimocks](#):
>
> ```auto
> {
> "query": {
> "simple_query_string" : {
> "query": "Query String Goes Here",
> "fields": ["*"]
> }
> }
> } 
> 
> ```

Hi,

thanks for your answer. That's working in the Query DSL Filter. Can I do this in the KQL Bar to simplify ?

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [December 23, 2020, 3:37pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/4 "2020-12-23T15:37:10Z")

</div>

You can just put your query string in the KQL bar without a field name and it will search across all fields. You can see this by clicking `inspect` and `request` to see how it converts it to DSL.

The end result looks like this minus all the other options passed in.

```auto
GET kibana_sample_data_logs/_search
{
  "query": {
    "multi_match": {
      "query": "Query String Goes Here"
    }
  }
}

```

So it's the same as above except using `multi_match` vs `simple_query_string`.

References - [Multi Match](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-multi-match-query.html)

---

<div class="post-metadata">

**Author:** ![Finley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/finley/32/81314_2.png) [@Finley](https://discuss.elastic.co/u/Finley)\
**Post date:** [December 23, 2020, 5:01pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/5 "2020-12-23T17:01:38Z")

</div>

> [@aaron-nimocks](#):
>
> You can just put your query string in the KQL bar without a field name and it will search across all fields. You can see this by clicking `inspect` and `request` to see how it converts it to DSL.

Thanks, that's working.

I have 2 Kibana's :

A - 2000 Documents per **seconds**  
B - Few http logs (75 documents per **hour** )

I made my tests on the A one and it's returning 0 results. After testing on the B and working, I think it's an Elasticearch limit with the number of documents. I will investigate.

Thank you !

---

<div class="post-metadata">

**Author:** ![Finley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/finley/32/81314_2.png) [@Finley](https://discuss.elastic.co/u/Finley)\
**Post date:** [December 23, 2020, 5:25pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/6 "2020-12-23T17:25:00Z")

</div>

By the way, if you have an idea of how to fix it, don't hesitate

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 20, 2021, 5:25pm UTC](https://discuss.elastic.co/t/search-across-all-fields-on-kibana/259499/7 "2021-01-20T17:25:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.