# Searching like using grep in Kibana
**URL:** https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499
**Category:** Elasticsearch
**Created:** [July 2, 2019, 11:53am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499 "2019-07-02T11:53:23Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@vasek](https://discuss.elastic.co/u/vasek)
#### Post date: [July 2, 2019, 11:53am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499/1 "2019-07-02T11:53:23Z")
Hello,
some people in our company would like to search in message field like in in **(e)grep** utility. Exact match.
**Example:**
```
STRING="[userID=[W192ADM-x/AM41], LC=4557-A/IL, T=78, DATE=2019-07-02 14:15:16.0]"
echo "$STRING" | egrep "=\[W192ADM-x\/A"
It matches this string:
=[W192ADM-x/A
```
Elasticsearch uses standard analyzer and with this analyzer they cannot find some events exactly.
```
POST _analyze
{
"tokenizer": "standard",
"text": "[userID=[W192ADM-x/AM41], LC=4557-A/IL, T=78, DATE=2019-07-02 14:15:16.0]"
}
```
1. Should I use keyword data type?
2. Could you please help me which [analyzer](https://www.elastic.co/guide/en/elasticsearch/reference/current/analysis-analyzers.html) or data type should I choose for exact match (searching must be possible on all characters in message)?
3. Is it good way to store message as **message.for-exact-match** too and apply different analyzer to this field? I don't want lose possibility of standard analyzer.
---
### Author:  [@vasek](https://discuss.elastic.co/u/vasek)
#### Post date: [July 29, 2019, 10:39am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499/2 "2019-07-29T10:39:51Z")
Answered in [Kuery exact match](https://discuss.elastic.co/t/kuery-exact-match/136145).
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 26, 2019, 10:39am UTC](https://discuss.elastic.co/t/searching-like-using-grep-in-kibana/188499/3 "2019-08-26T10:39:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.