Hi,
I’m new to ELK. For searching, I’m using dev tools in kibana. I want to find all the results that do not match a wildcard term.
"must_not": [
{"wildcard": {
"agent.keyword": {"value":"python*"}
}}]
It returns "[must_not] query malformed, no start_object after query name "
Can we use must_not with wildcard statement?
RabBit_BR
(andre.coelho)
January 16, 2023, 11:12am
2
Hi @geeky_human
Are you using the "must_not" inside the Bool Query?
{
"query": {
"bool": {
"must_not": [
{
"wildcard": {
"agent.keyword": {
"value": "python*"
}
}
}
]
}
}
}
2 Likes
system
(system)
Closed
February 13, 2023, 11:13am
3
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.