# Searching for null value in kibana

**URL:** <https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270>\
**Category:** Kibana\
**Tags:** kql-kibana-query-language\
**Created:** [September 15, 2021, 11:03am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270 "2021-09-15T11:03:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![venkatkumar229](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatkumar229/32/104663_2.png) [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Post date:** [September 15, 2021, 11:03am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/1 "2021-09-15T11:03:47Z")

</div>

Hi Team,

I am trying to search a field with null value which is inside a list.

my search filed data ex:

doc 1:  
`"response": {"AttrList":[{},{"Id":"DUE_DATE","value":"10.05.2021"}]}`

doc2:  
`"response": {"AttrList":[{},{"Id":"DUE_DATE","value":""}]}`

I want to search in kibana where the "DUE\_DATE" is not having any value. I have tried like below. But it is giving me all the documents with and without date field. I need to get only doc2. Can someone please help me in searching.

query which i have tried:  
`response: "\{\"Id\":\"DUE_DATE\"\,\"value\":\"\"\}"`

---

<div class="post-metadata">

**Author:** ![LizaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lizad/32/51074_2.png) [@LizaD](https://discuss.elastic.co/u/LizaD)\
**Post date:** [September 15, 2021, 7:13pm UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/2 "2021-09-15T19:13:44Z")

</div>

Hi @venkatkumar229, try using `exists` query, in this case does not exist, here is some documentation: [Exists query | Elasticsearch Guide [7.14] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-exists-query.html)

---

<div class="post-metadata">

**Author:** ![venkatkumar229](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatkumar229/32/104663_2.png) [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Post date:** [September 16, 2021, 6:13am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/3 "2021-09-16T06:13:28Z")

</div>

Hi Liza,

I have tried as you mentioned in KQL but it's not giving me any result. Could you please help me with the exact query.

i have tried like below:  
`response: "\{\"Id\":\"DUE_DATE\"\,_exists_:\"value\":\"\"\}"`

---

<div class="post-metadata">

**Author:** ![LizaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lizad/32/51074_2.png) [@LizaD](https://discuss.elastic.co/u/LizaD)\
**Post date:** [September 16, 2021, 9:33pm UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/4 "2021-09-16T21:33:06Z")

</div>

Hi @venkatkumar229,

Here are some examples: 1) if you are using KQL which is the Kibana search box, you can use something like this: `not DUE_DATE:*` or 2) you can add a filter in Kibana `NOT DUE_DATE: "exists"` or 3) In Elasticsearch Query DSL ```  
GET /\_search  
{  
"query": {  
"bool": {  
"must\_not": {  
"exists": {  
"field": "DUE\_DATE"  
}  
}  
}  
}  
}

```auto

```

---

<div class="post-metadata">

**Author:** ![venkatkumar229](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatkumar229/32/104663_2.png) [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Post date:** [September 17, 2021, 5:51am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/5 "2021-09-17T05:51:14Z")

</div>

Hi Lisa,

Thanks for the response. The above query is giving me the records where I don't have DUE\_DATE attribute instead of giving me DUE\_DATE records with empty value.

I have tried something like this in the kibana search bar and it is giving me the records where DUE\_DATE is empty like below.

`"response": {"AttrList":[{},{"Id":"DUE_DATE","value":""}]}`

Query I tried:  
`response:"{\"Id\":\"DUE_DATE\",\"value\":\"*\"}"`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 15, 2021, 5:52am UTC](https://discuss.elastic.co/t/searching-for-null-value-in-kibana/284270/6 "2021-10-15T05:52:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.