Unable to search specific email addresses

I'm trying to search in Kibana for a users email address
In the postfix logs I can see the email address

I can see a large number of emails for other users from @COMPANY.COM
The only difference is with this user as they have a ' in the surname of the email address

Can elasticsearch / kibana recognise / display email addresses with an ' in the email address or does it see the ' as a break in the address and see's it as invalid.

This depends on the analysis that Elasticsearch applies during indexing.

Is the email address being split into it's own field, or is it part of a bigger message?

Hi Mark
It is part of its own field when I search I just use the Filter
and then the email address but this noted address with the ' in it does not appear in Kibana at all
only visible in the postfix logs


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.