In Kibana, I have a field that contains a question mark. The goal is to create a filter that excludes all entries containing a question mark in the field.
Escaping the question mark with "\" seems not to work. I would have expected any of the two below to work.
If the string field is analyzed, the question mark has probably been eliminated during the analysis process when the document was indexed.
Hence why you aren't able to search it.
I suggest creating an additional
not_analyzed field (or sub-field) in order to achieve what you want.