GET logs*/_search
{
"query": {
"match_phrase": {
"message": "2=2"
}
}
}
Result :
"message": "2019-10-10 09:28:59.301644 xxx.xxx.xxx.xxx switchapp event=process_started process_name=kworker/2:2 pid=23026"
I am not able to get exact result.