How to make such kind of requests for kibana?
where field does not contain substring
It is easy to create filters like field: substring
. Neither not "substring"
or field: not(substring)
or field: not(*substring*)
work
To add to @gayavat's answer (which has put me on the right track), here is a real-life example:
NOT message:(view.html)
This is assuming I've got a filed "message", which is standard for Java logs. Or, you can combine it with other criteria:
pension AND NOT message:(view.html)
That will search for all occurrences of "pension", excluding those appearing together with the "view.html"
-field: "tracker"
works! Unfortunately, I did not find it in docs but only here http://logs101.com/how-to-overcome-the-missing-editable-filters-feature-in-kibana-4/
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With