# Search for special characters inside the message

**URL:** <https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553>\
**Category:** Kibana\
**Created:** [November 6, 2017, 3:19pm UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553 "2017-11-06T15:19:42Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anabella\_Cristaldi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anabella_cristaldi/32/23612_2.png) [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Post date:** [November 6, 2017, 3:19pm UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553/1 "2017-11-06T15:19:42Z")

</div>

Hi all,

Is it possible to search for messages that coontains the "\>" character or a secuence of two semicolons?  
I'm not able to do it in kibana filters.  
For example I have a set of docs with tag grokparsefailure \_ and want to get all the documents with \> in the message

2017-11-03T12:54:05.019+00:00 path:/data/sbc/raw\_data/FRAUD\_SBC\_INT\_201710060702\_000023790 @timestamp:2017-11-03T12:54:05.019+00:00 @version:1 host:plielk01 message:376721300\*\*\>\*\*;33637352955;20171006071132;19;O;STOP;BW071132820061017-904220898@10.11.41.2 ts\_start:2017-11-03T12:54:05.019+00:00 tags:\_grokparsefailure \_id:AV-B8g3-YS2WKg56uHLa \_type:logs \_index:temp\_sbc \_score: - Threshold:300

Is it possible?  
Thank you  
Ana

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [November 6, 2017, 6:21pm UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553/2 "2017-11-06T18:21:34Z")

</div>

In elasticsearch the [standard analyzer](https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-standard-analyzer.html) discards most punctuation, so I do not think you can do such searches, since the punctuation is never indexed. If you need to do it then ask in the elasticsearch forum about which analyzer might produce an index that supports those searches.

---

<div class="post-metadata">

**Author:** ![Anabella\_Cristaldi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anabella_cristaldi/32/23612_2.png) [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Post date:** [November 7, 2017, 7:42am UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553/3 "2017-11-07T07:42:18Z")

</div>

Thank you @Badger  
Regards  
Anna

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 5, 2017, 7:42am UTC](https://discuss.elastic.co/t/search-for-special-characters-inside-the-message/106553/4 "2017-12-05T07:42:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
