# Search pattern in DQL

**URL:** <https://discuss.elastic.co/t/search-pattern-in-dql/368771>\
**Category:** Logstash\
**Tags:** elastic-stack-alerting\
**Created:** [October 14, 2024, 12:19pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771 "2024-10-14T12:19:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mika1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mika1/32/137406_2.png) [@mika1](https://discuss.elastic.co/u/mika1)\
**Post date:** [October 14, 2024, 12:19pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771/1 "2024-10-14T12:19:00Z")

</div>

i need to find the below pattern from my application logs, when i put the below string in my DQL as provide below . i'm not getting any results. What should be the correct search query.

Sting to be searched : "Error - Code - 6004"

//  
"multi\_match": {  
"type": "phrase",  
"query": "Error - Code - 6004",  
"lenient": true  
}  
//

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [October 16, 2024, 8:45am UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771/2 "2024-10-16T08:45:19Z")

</div>

Could you share sample elasticsearch document and Index mapping? Seems there is no terms like `Error - Code - 6004`.

---

<div class="post-metadata">

**Author:** ![mika1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mika1/32/137406_2.png) [@mika1](https://discuss.elastic.co/u/mika1)\
**Post date:** [October 21, 2024, 3:03pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771/3 "2024-10-21T15:03:56Z")

</div>

below is my DOC , i'm trying to search in my logs for **Error - Code - 6001**  
but the Query is not working

_Error - Code - 6001, UsrMsg - Received httpError while calling Get API_

what should be corrected

---

<div class="post-metadata">

**Author:** ![ashishtiwari1993](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ashishtiwari1993/32/135241_2.png) [@ashishtiwari1993](https://discuss.elastic.co/u/ashishtiwari1993)\
**Post date:** [October 21, 2024, 3:31pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771/4 "2024-10-21T15:31:45Z")

</div>

What is your index mappings looks like ? You can get index mapping with below query -

`GET my-index/_mapping`

---

<div class="post-metadata">

**Author:** ![mika1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mika1/32/137406_2.png) [@mika1](https://discuss.elastic.co/u/mika1)\
**Post date:** [October 22, 2024, 5:02pm UTC](https://discuss.elastic.co/t/search-pattern-in-dql/368771/5 "2024-10-22T17:02:22Z")

</div>

hi Ashish, what i could see is that our application logging is not 100% perfect today on elastic.  
can you advise with the query that can be used when if i want to search for all occurrences of _"Error - Code - 6004"_ in my document