# Strange Query DSL results

**URL:** <https://discuss.elastic.co/t/strange-query-dsl-results/137944>\
**Category:** Kibana\
**Created:** [June 29, 2018, 11:11am UTC](https://discuss.elastic.co/t/strange-query-dsl-results/137944 "2018-06-29T11:11:19Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![waitangi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/waitangi/32/110887_2.png) [@waitangi](https://discuss.elastic.co/u/waitangi)\
**Post date:** [June 29, 2018, 11:11am UTC](https://discuss.elastic.co/t/strange-query-dsl-results/137944/1 "2018-06-29T11:11:19Z")

</div>

I'm getting strange search result while searching apache logs:

GET /filebeat-6.3.0-2018.06.27/\_search  
{  
"query": { "match": { "message": "/fonts/Roboto-Bold.ttf" } }  
}  
Result total is 88

GET /filebeat-6.3.0-2018.06.27/\_search  
{  
"query": { "match": { "message": "s/fonts/Roboto-Bold.ttf" } }  
}  
Result total is 371  
Second query is more detailed, so the number of results shold be the same or less, or I'm missing something obvious

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [June 29, 2018, 3:34pm UTC](https://discuss.elastic.co/t/strange-query-dsl-results/137944/2 "2018-06-29T15:34:33Z")

</div>

hi @waitangi,

this seems more like an Elasticsearch question, but the match-query, how it is written here just will do a string match because it just has a single term.

Maybe you just have more documents that have a message field that match with `s/fonts/Roboto-Bold.ttf` iso `/fonts/Roboto-Bold.ttf`?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 27, 2018, 3:34pm UTC](https://discuss.elastic.co/t/strange-query-dsl-results/137944/3 "2018-07-27T15:34:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.