How to find filed exist but empty in kibana KQL?

5.3k Views Asked by At

As title, i can't find a way to do it in kibana KQL. I have tried NOT field, it's not work.

1

There are 1 best solutions below

0
glenacota On BEST ANSWER

if your field is a keyword type, the KQL query below will check for existing but empty field values:

fieldname:""

Note that this won't work for a text analysed type