Using wildcard in must_not is not working

Elastic Stack Elasticsearch
1

Hi I am new to elasticsearch, i am having issues using wildcard with must_not clause. I tried to put it in both query and filter context.

Example to text I am trying to exclude is "Error reported by EQRMS for GetSwaps(..) : 67890", works with match_phrase but not with wildcard and I have to use wildcard as the number in the end of the text changes

"must_not": [
    {
    "wildcard": {
      "message": "Error reported by EQRMS for GetSwaps*"          
    }

I tried using message.keyword as mentioned in other thread but that isn't working as well. Anyone can help? :slight_smile:

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.