Show Menu
Cheatography

Kibana Search v5 Cheat Sheet by

Boolean Operators

And
AND && +
Or
OR || -
Not
NOT !
Operator in uppercase

Wildcards

Single characters
?
Multiple characters
*
Fuzzy
~

Ranges

1 to 10, including 1 and 10
[ 1 TO 10 ]
1 to 10, excluding 1 and 10
{ 1 TO 10 }
1 to 10, including 1, excluding 10
[1 to 5}
All days in 2017
[2017-­01-01 TO 2017-1­2-31]
Specific timestamp*
[2017-­01-­01T­09:­00:00 TO 2017-0­1-0­1T0­9:0­0:10]
Larger then 10
>10
Smaller then 10
<10
Larger or equal to 10
>=10
Smaller or equal to 10
<=10
* timestamp : warning to timezone
 

Reserved characters

Reserved
+ - = && || > < ! ( ) { } [ ] ^ " ~ * ? : \ /
Break character
\

Search

Keyword
keyword
Pattern
*ywo* ?eywor?
Match field
field:term
Match field**
field.r­aw­:TeRm
Field contains term1 or term2
field:­(term1 OR term2)
Field exists
_exist­s_:­field
Field missing
!(_exi­sts­_:f­ield)
Phrase
"­/et­c/e­las­tic­sea­rch­/"
Regular Expres­­sions
/h?[tx­]ml?/
JSON
{ "­mat­ch": { "­fie­ld": "­ter­m" } }
term : complete word in lowercase
** : Not analyzed fields are case sensitive

Filters

           
 

Comments

No comments yet. Add yours below!

Add a Comment

Your Comment

Please enter your name.

    Please enter your email address

      Please enter your Comment.

          Related Cheat Sheets

          Kibana Query Language (KQL) Cheat Sheet

          More Cheat Sheets by Alasta

          Bash Cheat Sheet