Templates are a great way to get started with an advanced search. The templates contain predefined rules for some of the most commonly sought types of information. Using the templates, you can perform these kinds of searches:
- Credit card
- Phone number
- Postal code
- Social security numbers (Canada, France, USA)
If you are familiar with regular expressions, it is possible to create your own custom templates. However, we suggest contacting Support for guidance before doing so. For more information on regular expressions, refer to elastic.co/regular expression syntax.
- In the Advanced Search dialog box, click Add Rule.
- Click in a field and select a template located at the bottom of the list.
- Depending on the template you selected, do one of the following:
- Credit card: Select a type of credit card.
- Email, phone number, postal code, social security number, URL: Select All or select the other option in the list.
- From the Operator list, select one of the following operators:
- Matches: Searches for items that contain the same properties as your query.
- Matches (word list): Searches for items that contain the same properties as a word list—see About Word Lists.
- In the text field beside the operator is an asterisk (*) which is the wild card symbol and can represent any alphanumeric character. This is used for searching for partial strings which is helpful if you want to hone in on certain credit cards that start with a specific sequence of numbers. For example: 4150*.
- Select the Phrase Match option to search for a sequence of terms. This preserves the sequence of the words or numbers you enter and is not case sensitive. It is useful when you have a clear idea of the results you are looking for yet still want to see possible variations. In this example, we are looking for items that contain these numbers: 4150.
- Click Search to execute the query.
- The result is displayed in the Document view and the Advanced Search dialog box is closed.