"_index" : "cavisson",
"_type" : "employe",
"_id" : "AVYmChcQBTmXaFaGmUUC",
"_score" : 1.0,
"_source" : {
"index" : "accesslogs-2016.07.25",
"type" : "access-logs",
"id" : "AVYh7r_tJzp3rn8vpJdw",
"score" : null,
"source" : {
"message" : "10.202.1.254\t10.202.4.233:7003\t-\t2016-07-25\t07:01:49\t0.008\tGET\t/price/2263284.jsp?type=product\ttype=product\t200\t228\t"Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36"\t"76.255.212.43, 209.107.208.140, 10.27.120.7"\t"[corRID::m2223c292eb96-9d90-4f7d-86e7-6c65b9c05dcd]"\t"[SID::KjLTI4eUpuMxuKUYFNfYemqhzIsMrxM1FG640cAt8TSKSpJobkdI!1184349807!1353240661!1468126168980][PID::2254024710660255][OID::4772230697][dcrt::pkyp][klbc::3909405194.23323.0000][klbd::187642540.20480.0000][VID::2254024710660255]"",
"@version" : "1",
"@timestamp" : "2016-07-25T12:01:49.000Z",
"path" : "/home/netstorm/work/NetForestDemo/generated_logs/scs/Storefront/stfserverscs1/kls-stf-31/access.log",
"host" : "nsdev-10g-2",
"type" : "access-logs",
"tier" : "Storefront",
"server" : "stfserverscs1",
"app" : "kls-rst-31",
"nde" : "scs",
"clientip" : "10.202.1.254",
"dest" : "10.202.4.233",
"port" : "7003",
"username" : "-",
"time" : "07:01:49",
"resptime" : 0.008,
"httpmethod" : "GET",
"uripathparam" : "/price/2263284.jsp?type=product",
"uriparam" : "type=product",
"httpstatuscode" : 200,
"sizeinbytes" : 228,
"useragent" : "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36",
"xForwardedFor" : "76.255.212.43,",
"uri" : "/price/2263284.jsp"
this is my log want to search tier from URI
eg: curl -XGET 'http://localhost:9200/cavisson/employe/_search?q=tier:Storefront&pretty'
i have give this but the result is
{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"failed" : 0
},
"hits" : {
"total" : 0,
"max_score" : null,
"hits" : [ ]
}
}
how do i get the field with URI search?