Wildcard search not working

gugansankar · April 23, 2016, 12:30pm

In Kibana, When i type "*.jpg", its return the values.

But this one is not working, shows empty result --> uripath:"*.jpg". I need to get this work. Since I need to match some patterns like domainname:"www.example.com" AND uripath:"*.jpg"

Please someone help

I'm using default analyzer and mappings is enabled for my index with default one.

warkolm · April 23, 2016, 11:59pm

And you're sure you have .jsp entries in your logs?

gugansankar · April 25, 2016, 4:24am

Sorry , typo mistake. its not a jsp , its s "jpg".

Yes, jpg files are present in my logs. Since When I simply type in search bar on kibana "*.jpg", it shows the values.

But When I parse the same on with field name like *uripath:"jpg" , its not working.

tylersmalley · April 25, 2016, 4:52pm

What version of Kibana are you using?

I have tested this and it appears to be functioning correctly.

gugansankar · April 26, 2016, 5:24am

Thanks for your kind reply.

I'm using latest version of kibana-4.5.0-1.

my full uripath will be like "/info/images/new.jpg".

When I run "*.jpg", its return the value. But uripath:"*.jpg" is not working.

shaunak · April 28, 2016, 2:24pm

Can you try without the double quotes around *.jpg, so like this: uripath:*.jpg (instead of uripath:"*.jpg")?