# Search Query Help

**URL:** <https://discuss.elastic.co/t/search-query-help/249469>\
**Category:** Elasticsearch\
**Created:** [September 22, 2020, 7:54am UTC](https://discuss.elastic.co/t/search-query-help/249469 "2020-09-22T07:54:59Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![tolar](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@tolar](https://discuss.elastic.co/u/tolar)\
**Post date:** [September 22, 2020, 7:54am UTC](https://discuss.elastic.co/t/search-query-help/249469/1 "2020-09-22T07:54:59Z")

</div>

I inserted records with below commands:

```auto
    POST dnmindex1/doc/
    {
        "matches": [
            {
                "XURI": "xcp:4.1:a:abcv12:abcp12:6.0:*:*:*:*:*:*:*"           
            },
            {
                "XURI": "xcp:4.1:a:abcv1:abcp1:6.0:beta1:*:*:*:*:*:*",         
            },
            {
                "XURI": "xcp:4.1:a:abcv:abcp:6.0:beta2:*:*:*:*:*:*",          
            }
        ]
    }

    POST dnmindex1/doc/
    {
        "matches": [
            {
                "XURI": "xcp:4.1:a:abcv-abc12:abcp-abc12:6.0:*:*:*:*:*:*:*"          
            },
            {
                "XURI": "xcp:4.1:a:abcv-abc1:abcp-abc1:6.0:beta1:*:*:*:*:*:*",          
            },
            {
                "XURI": "xcp:4.1:a:abcv-abc:abcp-abc:6.0:beta2:*:*:*:*:*:*",          
            }
        ]
    }

    POST dnmindex1/doc/
    {
        "matches": [
            {
                "XURI": "xcp:4.1:a:bgbgbv:bgbgbp:6.0:*:*:*:*:*:*:*"           
            },
            {
                "XURI": "xcp:4.1:a:bgbgbv-abc1:bgbgbp-abc1:6.0:beta1:*:*:*:*:*:*",           
            },
            {
                "XURI": "xcp:4.1:a:bgbgbv-abc:bgbgbp-abc:6.0:beta2:*:*:*:*:*:*",          
            }
        ]
    }

```

Now I want to get record which has :abcv-abc12:abcp-abc12:

I used below query but got error.

```auto
    GET dnmindex1/_search
    {
    "query": {
    	"bool": {
    	"must": [
    		{
    			"query_string": {
    			        "default_field": "matches.XURI",
    			        "query": ":abcv-abc12:abcp-abc12:"
    		}
    		}
    		]
    	}
    }
    }

```

What is wrong with my search query? What query should I use to get the record I want?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 22, 2020, 9:00am UTC](https://discuss.elastic.co/t/search-query-help/249469/2 "2020-09-22T09:00:24Z")

</div>

The problem is that the query string query tries to parse the content to see if you want to search in specific fields. i.e.: `fielda:foo fieldb:bar` which would indicate that you want to search for `foo` value in field `fielda` or `bar` in field `fieldb`.

As you are using also this ":" character, it make fails the request.

Instead try:

```auto
GET dnmindex1/_search
{
  "query": {
    "match": {
      "matches.XURI": ":abcv-abc12:abcp-abc12:"
    }
  }
}

```

Or

```auto
GET dnmindex1/_search
{
  "query": {
    "simple_query_string": {
        "fields": ["matches.XURI"],
        "query": ":abcv-abc12:abcp-abc12:"
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![tolar](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@tolar](https://discuss.elastic.co/u/tolar)\
**Post date:** [September 22, 2020, 9:44am UTC](https://discuss.elastic.co/t/search-query-help/249469/3 "2020-09-22T09:44:22Z")

</div>

Both are worked. Thanks.

But if I search xcp:4.1:a:abcv-abc12:abcp-abc12: they don't work properly. I guess because of the dot (4.1) . What can I do in this case?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 22, 2020, 10:33am UTC](https://discuss.elastic.co/t/search-query-help/249469/4 "2020-09-22T10:33:54Z")

</div>

You need to understand how analyzers are working behind the scene. Try the `_analyze` API to see how your text is actually indexed at index time and search time. See [https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-analyze.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-analyze.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 20, 2020, 10:34am UTC](https://discuss.elastic.co/t/search-query-help/249469/5 "2020-10-20T10:34:06Z")

</div>

Closed on October 20, 2020, 10:34am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.