Show Menu

Kibana Search v5 Cheat Sheet by

elastic     kibana     bigdata     elk

Boolean Operators

And
AND && +
Or
OR || -
Not
NOT !
Operator in uppercase

Wildcards

Single characters
?
Multiple characters
*
Fuzzy
~

Ranges

1 to 10, including 1 and 10
[ 1 TO 10 ]
1 to 10, excluding 1 and 10
{ 1 TO 10 }
1 to 10, including 1, excluding 10
[1 to 5}
All days in 2017
[2017-­01-01 TO 2017-1­2-31]
Specific timestamp*
[2017-­01-­01T­09:­00:00 TO 2017-0­1-0­1T0­9:0­0:10]
Larger then 10
>10
Smaller then 10
<10
Larger or equal to 10
>=10
Smaller or equal to 10
<=10
* timestamp : warning to timezone
 

Reserved characters

Reserved
+ - = && || > < ! ( ) { } [ ] ^ " ~ * ? : \ /
Break character
\

Search

Keyword
keyword
Pattern
*ywo* ?eywor?
Match field
field:term
Match field**
field.r­aw­:TeRm
Field contains term1 or term2
field:­(term1 OR term2)
Field exists
_exist­s_:­field
Field missing
!(_exi­sts­_:f­ield)
Phrase
"­/et­c/e­las­tic­sea­rch­/"
Regular Expres­­sions
/h?[tx­]ml?/
JSON
{ "­mat­ch": { "­fie­ld": "­ter­m" } }
term : complete word in lowercase
** : Not analyzed fields are case sensitive

Filters

Download the Kibana Search v5 Cheat Sheet

1 Page
//media.cheatography.com/storage/thumb/alasta_kibana-search-v5.750.jpg

PDF (recommended)

Alternative Downloads

Share This Cheat Sheet!

 

Comments

No comments yet. Add yours below!

Add a Comment

Your Comment

Please enter your name.

    Please enter your email address

      Please enter your Comment.

          Related Cheat Sheets

          More Cheat Sheets by Alasta

          Bash Cheat Sheet