# Watcher results returning similar terms instead of specific one while using match query
**URL:** https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one-while-using-match-query/245005
**Category:** Elasticsearch
**Created:** [August 14, 2020, 12:12pm UTC](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one-while-using-match-query/245005 "2020-08-14T12:12:43Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@suryanaj](https://discuss.elastic.co/u/suryanaj)
#### Post date: [August 14, 2020, 12:12pm UTC](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one-while-using-match-query/245005/1 "2020-08-14T12:12:44Z")
my watcher alert query is not returning the exact match of url it returns all similar search of http.url keyword. i am using 6.8.3. I want exact match or search of http.url. Please suggest .
{
"trigger": {
"schedule": {
"interval": "2m"
}
},
"input": {
"search": {
"request": {
"search\_type": "query\_then\_fetch",
"indices": [
"heartbeat--dxdttest-2020.08.12"
],
"types": ,
"body": {
"query": {
"bool": {
"must": [
{
"term": {
"http.url": "[http://nexusuat/nexus/](http://nexusuat/nexus/)"
}
},
{
"term": {
"monitor.status": "down"
}
},
{
"range": {
"@timestamp": {
"gte": "now-5m"
}
}
}
]
}
},
"sort": [
{
"@timestamp": {
"order": "desc"
}
}
]
}
}
}
},
"condition": {
"compare": {
"ctx.payload.hits.total": {
"gt": 0
}
}
},
"actions": {
"email\_administrator": {
"email": {
"profile": "standard",
"from": "[noreply-ESaaS@xyz.com](mailto:noreply-ESaaS@xyz.com)",
"to": [
"[ajay.suryan@xyz.com](mailto:ajay.suryan@xyz.com)"
],
"subject": "Alert: Heartbeat monitoring is reporting that down status",
"body": {
"html": "
Hello Team,
Notice NexusV3 is down in Prod environment"
}
}
}
},
"metadata": {
"app": "dxdt",
"description": "Alert if status is down",
"env": "DX DT/Nexus Prod"
},
"throttle\_period\_in\_millis": 900000
}
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [August 15, 2020, 8:17pm UTC](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one-while-using-match-query/245005/2 "2020-08-15T20:17:38Z")
What is the mapping of the `http.url` field?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 12, 2020, 8:17pm UTC](https://discuss.elastic.co/t/watcher-results-returning-similar-terms-instead-of-specific-one-while-using-match-query/245005/3 "2020-09-12T20:17:55Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.