# Search in kibana

**URL:** <https://discuss.elastic.co/t/search-in-kibana/34278>\
**Category:** Kibana\
**Created:** [November 10, 2015, 7:25pm UTC](https://discuss.elastic.co/t/search-in-kibana/34278 "2015-11-10T19:25:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![hmatos](https://avatars.discourse-cdn.com/v4/letter/h/b9e5f3/32.png) [@hmatos](https://discuss.elastic.co/u/hmatos)\
**Post date:** [November 10, 2015, 7:25pm UTC](https://discuss.elastic.co/t/search-in-kibana/34278/1 "2015-11-10T19:25:50Z")

</div>

Hello,

i have some imap inputs in logstash and i receive messages like this  
... Service unavailable; Client host [192.168.1.1] blocked using ...  
and i want to search by Client host [ip address].

how can i do the search i try message:" Client host [_._._._]" but it doesn't grab the ip address

is there a way to do this search?

thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 11, 2015, 6:14am UTC](https://discuss.elastic.co/t/search-in-kibana/34278/2 "2015-11-11T06:14:49Z")

</div>

What if you just search for the IP?

---

<div class="post-metadata">

**Author:** ![hmatos](https://avatars.discourse-cdn.com/v4/letter/h/b9e5f3/32.png) [@hmatos](https://discuss.elastic.co/u/hmatos)\
**Post date:** [November 11, 2015, 9:02am UTC](https://discuss.elastic.co/t/search-in-kibana/34278/3 "2015-11-11T09:02:53Z")

</div>

the IP change

and i want to search all the messages that have Client host [IP ADDR]

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:09pm UTC](https://discuss.elastic.co/t/search-in-kibana/34278/4 "2017-07-06T14:09:21Z")

</div>