I'm trying to search for an IP (example query on search page: 127.0.0.1) in the filebeat-* index, and the results indicate 0. If I put *.ip:127.0.0.1 it works fine (I get results with desintation and source IPs). Appears to be the same with KQL or lucene. My concern and question is, shouldn't kiba…

Search for IP address does not return results

rashmi (kulkarni) April 24, 2020, 5:57pm 6

Thanks for posting those links, really helpful. Also copying our infra docker expert @jarpy for more insights into this. He will get back to you when he has some time.

Thanks
Rashmi

Topic		Replies	Views
Unable to search all fields for IP address Kibana	3	643	December 14, 2019
Question About search in Kibana Kibana	2	296	November 26, 2020
Searching for a broadcast IP in Kibana Kibana	5	2021	July 6, 2017
Kibana 4 Not searching all fields Elasticsearch	1	331	July 6, 2017
Kibana Dashboard question Kibana	4	841	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Search for IP address does not return results

Related topics