# Searching Does not Return Results - Challenge

**URL:** <https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832>\
**Category:** Elasticsearch\
**Created:** [December 29, 2020, 10:02pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832 "2020-12-29T22:02:14Z")\
**Posts on this page:** 11\
**Page:** 2

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 2, 2021, 5:38pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/21 "2021-03-02T17:38:33Z")

</div>

> [@Gary\_Blackwell](#):
>
> Does that help?

Not really as I can't reproduce anything with that.

What is the source of the data? How did you inject it?

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [March 2, 2021, 8:57pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/22 "2021-03-02T20:57:56Z")

</div>

We're using filebeats and the 0365.yml file.  
I can successfully search using o365.audit.ExtendedProperties.RequestType:"OAuth2:Token" and get results. I can search using [persons\_name@somecompanyemail.com](mailto:persons_name@somecompanyemail.com) and that works fine. I don't understand why "OAuth2:Token" would not work.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 2, 2021, 10:07pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/23 "2021-03-02T22:07:52Z")

</div>

I don't know exactly how this module works.

If you can reproduce that behavior with a script reproduction as I shared, that'd help to help you.

Otherwise, you can ask in #elastic-stack:beats using the #filebeat tag and someone might be able to help or say if it's a bug.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [March 12, 2021, 3:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/24 "2021-03-12T15:56:11Z")

</div>

I will have to work on using a script.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [March 23, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/25 "2021-03-23T14:56:41Z")

</div>

I haven't had a chance to look at the scripting.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [April 16, 2021, 7:26pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/26 "2021-04-16T19:26:32Z")

</div>

I haven't had a chance to learn to use the script as requested.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [April 23, 2021, 5:18pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/27 "2021-04-23T17:18:06Z")

</div>

I posted in the suggested forum [Searching Does not Return Results - Challenge](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/271116). I don't think I will get to the scripting anytime soon.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [May 5, 2021, 7:43pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/28 "2021-05-05T19:43:20Z")

</div>

I have not received a reply in the alternative forum.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 6, 2021, 12:55pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/29 "2021-05-06T12:55:13Z")

</div>

You asked for the exact same question.

And as @warkolm and myself asked, you need to provide enough information so we understand what you are doing and how exactly.

Again, my recommendation would be to provide a full recreation script as described in [About the Elasticsearch category](https://discuss.elastic.co/t/about-the-elasticsearch-category/21). It will help to better understand what you are doing. Please, try to keep the example as simple as possible.

**A full reproduction script is something anyone can copy and paste in Kibana dev console,** click on the run button to reproduce your use case. It will help readers to understand, reproduce and if needed fix your problem. It will also most likely help to get a faster answer.

---

<div class="post-metadata">

**Author:** ![Gary\_Blackwell](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gary_blackwell/32/62181_2.png) [@Gary\_Blackwell](https://discuss.elastic.co/u/Gary_Blackwell)\
**Post date:** [May 12, 2021, 2:56pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/30 "2021-05-12T14:56:59Z")

</div>

Does anyone use Kibana for searching data in Elastic? I'm putting a search term in the Kibana search box sort of what one would do if he or she were searching using Google. Is it possible to put data in Elastic in a way where it can't be found?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 9, 2021, 2:57pm UTC](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832/31 "2021-06-09T14:57:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/searching-does-not-return-results-challenge/259832.md?page=1)
