Hi, I am new to Elasticsearch and Kibana. I am using the Kibana Dev Tools to search Elasticsearch. What I want to do is find all results that don't match a wildcard term. If I try this a search with "must_not": [ { "match": { "message": "JOINNG" } it returns as expec…

Yes, that's the reason why it's not working, so in your query, you should use the "not analyzed" version of the message field, which is message.keyword, according to the mapping. "must_not": [ { "wildcard": { "message.keyword": "JOIN*" }

Using must_not and wildcard to search

Elastic Stack Elasticsearch

klof (Karl Lof) June 5, 2018, 10:53am 2

What is the datatype of the message field?
It must be keyword, as wildcard works only with not analyzed fields.

https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-wildcard-query.html

Topic		Replies	Views
Using wildcard and must_not to search Elasticsearch	2	657	February 13, 2023
Using wildcard in must_not is not working Elasticsearch	1	305	August 25, 2021
Wildcard search not working for text field Elasticsearch	8	3231	July 11, 2018
Watcher - Multiple wildcards not catching Elasticsearch	2	452	April 1, 2020
Must not filter not working on fields Elasticsearch	4	1438	July 5, 2017

Using must_not and wildcard to search

Related topics