Elastic Query string not equal to

Question

We have some requirement in kibana where we need to exclude some request urls like ‘/ibe/document/*’ and fetch the other requests.

Options Tried

We have tried the below options

{ "query": { "bool" : { "must_not" : { "term" : { "request.keyword" : "/ibe/document/.*" } } } } }
NOT ( "request.keyword" : "/ibe/document/.*")
!("request.keyword" : "/ibe/document/.*")

But even if we use any of the above queries, In the filtered data, we are still getting records with "request.keyword" : "/ibe/document/”. Can you provide suggestions on query to avoid this "request.keyword" : "/ibe/document/."

I have tried running all the above with "request.keyword" : "/ibe/document/." and "request.keyword" : "/ibe/document/" . But every time, the records corresponding to requests "request.keyword" : "/ibe/document/*" are being fetched

Bhavya · Accepted Answer · 2021-06-17 05:16:58Z

1

You can use the below wildcard query to exclude all the results that start from /ibe/document/

{
  "query": {
    "bool": {
      "must_not": {
        "wildcard": {
          "request.keyword": "/ibe/document/*"
        }
      }
    }
  }
}

answered Jun 17, 2021 at 5:16

Bhavya

16.2k3 gold badges23 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Elastic Query string not equal to

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related