如何将弹性搜索查询从Kibana 3转换为Kibana 4

Question

I have created a dashboard in Kibana 3. I would like to replicate the same in Kibana 4.
How can I replicate this elastic search query written in Kibana 3 to Kibana4?

Please find the below code:

( cf.cf_org_name:ABC OR cf.cf_org_name:DEF ) AND NOT (cf.msg:"Stopped span:" OR cf.msg:"Continued span:" OR cf.msg:"Starting span:" OR cf.msg:"*swagger*" OR cf.msg:"*\[my.Agent\]" OR cf.msg:"*\[my.Properties\]")

Any lead would be highly appreciated.

Answer 1

I read somewhere Kibana sets allow_leading_wildcard to false, so you may have to set allow_leading_wildcard to true in the settings/advanced tab of Kibana in the field query:queryString:options.

This is because you are using for example cf.msg:"*swagger*" in your query.