Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to find filed exist but empty in kibana KQL?

As title, i can't find a way to do it in kibana KQL. I have tried NOT field, it's not work.

like image 304
Chandler.Huang Avatar asked Oct 22 '25 11:10

Chandler.Huang


1 Answers

if your field is a keyword type, the KQL query below will check for existing but empty field values:

fieldname:""

Note that this won't work for a text analysed type

like image 113
glenacota Avatar answered Oct 27 '25 02:10

glenacota