Inconsistent wildcard search
Description
Attachments
- 07 Oct 2011, 06:33 PM
Gliffy Diagrams
Activity
Richard Pijnenburg December 17, 2012 at 4:33 AM
No work will be done on the current logstash-web and will be replaced by Kibana ( www.kibana.org )
Currently there are 2 options.
1) Wait until Kibana is runnable from logstash.
2) Run kibana your self.
Hakan Lindestaf October 13, 2011 at 4:39 PM
ok, added to FAQ. Not a great write-up, but at least it's a start.
Hakan Lindestaf October 13, 2011 at 4:26 PM
There is a setting in ES to make the search term lower case, it may be that it is on by default, I don't know for sure, it's just what my testing showed (that the search terms seemed to always be treated as lower case in ES).
Jordan Sissel October 13, 2011 at 4:20 PMEdited
This information (analyzers, etc) would be great info for the wiki if you want to add it: https://github.com/logstash/logstash/wiki/
Jordan Sissel October 13, 2011 at 4:18 PM
"I think the search query was automatically (by the Logstash UI) made lower case, "
Logstash doesn't alter any input (data or search queries) in this way
I was trying to search on a field that has a value like this: trackingid:Api23-12345 by doing a search on trackingid:Api23*. It didn't return me anything. If I entered trackingid:"Api23-12345" then I get everything matching. If I enter trackingid:"api23-12345" (different case) then no hits. How can I enter a search term that does a wildcard search on this field, ignoring case? I'm not sure if this is a user error (me) or a bug, but I figured I'll open a ticket.