Searching for response code, get results without the response code field

Elastic Stack Kibana
1

I ma using the Discover tab and I am using the Search field with the following query:
"NOT response-http-code:(202)".
The problem is I am getting result with 403 which is correct, but I also see entries without the response-http-code field.

How would I need to setup querry to see the response code not equal to 202 but also not see the entries without response-http-code field?

2

Hi @flex567,

Does NOT response-http-code:"202" AND response-http-code:* work for you?

This should filter to items that don't match 202 and the * should make sure only results are returned where there is a value for response-http-code

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.