Special Character # search on Kibana Search Bar

Elastic Stack Kibana
1

I have defined an analyzer
"analyzer": {
"special_analyzer": {
"filter": [
"lowercase",
"custom_special_char_filter"
],
"type": "custom",
"tokenizer": "whitespace"
}
}
},

and it analyzes the # value

QUERY:
POST .ds-os-logs-test-2024.03.07-000001/_analyze
{
"analyzer": "special_analyzer",
"text": "############### For ObjectID:332270810058 getting trace BV ID:212318 BV Value:337040313158 Found in Cache?:T ----- PL/SQL Call Stack -----"
}

OUTPUT:
{
"tokens": [
{
"token": "###############",
"start_offset": 0,
"end_offset": 15,
"type": "word",
"position": 0
},
{
"token": "for",
"start_offset": 16,
"end_offset": 19,
"type": "word",
"position": 1
},
.
.
.

But when I search for os.log.message : ############### I do not get any records.
I have even tried using ###############, /###############/, #
Nothing works.

Kindly advise what I need to do.

2

Hello @nkf_123, welcome to the community!

Try filtering by the keyword subfield: os.log.message.keyword: ###############

3

os.log.message is of type: text.
I need to maintain it as type - text.

What is strange is that the analyzer picks the # value due to whitespace tokenizer but it fails to search for it in kibana search bar

4

@elastic_team Please help me out

5

@Priscilla_Parodi
os.log.message is of type: text.
I need to maintain it as type - text.

What is strange is that the analyzer picks the # value due to whitespace tokenizer but it fails to search for it in kibana search bar

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.