Off the top of my head, I would use a custom analyzer with a whitespace tokenizer and a word delimiter filter (preserving the original tokens as well). Perhaps a shingle filter to create bigrams. Or better yet a pattern tokenizer with spaces and parenthesis.
Cheers, Ivan On Tue, Aug 26, 2014 at 11:57 PM, Marc <mn.off...@googlemail.com> wrote: > Hi, > > I have quiet a simple scenario that already gives me a headache for quiet > a while. > I have one Field which is quiet big and full of special characters like > (,),=,:,",' digits and text. > Example: > "msg" : "Service=MyMDB.onMessage appId=cs Times=Me:22/Total:22 (updated > attributes=gps_lng: 183731222/ gps_lat: 289309222/ )" > I essentially want to be able to search this things using text, wildcards > etc. > So far I have tried not analyzing the content and using the wildcard > search and it doesn't work very well. > Using different tokenizers and the query_string query also only works to a > certain degree. > For example I want to be able to serach for following expressions: > Service > MyMDB > onMessage > MyMDB.onMessage > appId=cs AND Times=Me:22 > > and other possible permutations. > What is a correct setup?! I simply can't find a solution... > > ps.: the data is imported to elasticsearch using logstash. We do acces the > data using the java api (all software latest versions). > > > Cheeers, > Marc > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to elasticsearch+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/ada9c759-41e0-46ad-9941-3a0f2fb7c122%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/ada9c759-41e0-46ad-9941-3a0f2fb7c122%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQBP26Q-H1Am3LBDXn6uLhg20tLregFdNLUan1Z8J2yTKg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
