I'm trying to search Apache access logs using a wildcard on the useragent.name field (as added by the useragent plugin) I'm searching on the Discover tab in Kibana 4.6.1 I can search for useragent.name:"Chrome Mobile" and get lots of hits. I can also search for useragent.name:"Chrome" and get lot…

I recommend you this great article: [image] Elasticsearch/Kibana Queries - In Depth Tutorial This tutorial explains how to write and understand Kibana and Elasticsearch queries in depth and how the mapping of Elastichsearch influences these queries. I quote …

Discuss the Elastic Stack

Wildcard query not working as expected

Elastic Stack Kibana

Joe_Fleming (Joe Fleming) May 3, 2017, 7:04pm 2

This works for me locally as expected. I wonder if it's a case matching issue.

What are the exact values you get back for useragent.name when you search for useragent.name:"Chrome"?

Searching in Logs using wildcards does not work

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.