# Wildcard query is not working for long value in cmdline parameter

**URL:** <https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991>\
**Category:** Kibana\
**Created:** [July 27, 2018, 8:04pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991 "2018-07-27T20:04:36Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sandiagee](https://avatars.discourse-cdn.com/v4/letter/s/cc9497/32.png) [@sandiagee](https://discuss.elastic.co/u/sandiagee)\
**Post date:** [July 27, 2018, 8:04pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991/1 "2018-07-27T20:04:36Z")

</div>

I am have tried writing following DSL to filter my data, but query is not giving any proper results. Any ideas?

{  
"query": {  
"wildcard": {  
"system.process.cmdline": "_cfx\_connector\_router_"  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [July 30, 2018, 4:37pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991/2 "2018-07-30T16:37:33Z")

</div>

Hey @sandiagee, is `system.process.cmdline` an analyzed text field, if it is you'll likely want to switch to using an unanalayzed text field, do you have a `system.process.cmdline.keyword` field?

Also, there are no wildcards in `cfx_connector_router` , would you mind elaborating what you're trying to filter on?

---

<div class="post-metadata">

**Author:** ![sandiagee](https://avatars.discourse-cdn.com/v4/letter/s/cc9497/32.png) [@sandiagee](https://discuss.elastic.co/u/sandiagee)\
**Post date:** [July 30, 2018, 5:29pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991/3 "2018-07-30T17:29:02Z")

</div>

Hi,

Thanks for your response. Ask is to find system resource utilization details for job\_name which is deep buried in system.process.cmdline.

I tried it further and looks like the wild query is working when cmdline field is having "x" number of characters in it, but not working if number of characters exceeds that "x" number of characters.

Is there any limitation for DSL?

---

<div class="post-metadata">

**Author:** ![sandiagee](https://avatars.discourse-cdn.com/v4/letter/s/cc9497/32.png) [@sandiagee](https://discuss.elastic.co/u/sandiagee)\
**Post date:** [July 31, 2018, 8:30pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991/4 "2018-07-31T20:30:29Z")

</div>

This is resolved. system.process.cmdline is keyword field. We have created a new index to use the field as text which is allowing to run any wildcard queries.

Thanks for information and support.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 28, 2018, 8:30pm UTC](https://discuss.elastic.co/t/wildcard-query-is-not-working-for-long-value-in-cmdline-parameter/141991/5 "2018-08-28T20:30:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.