Using Regex/Substring of a Template Variable and adding it to a Query Elasticsearch db

[roleyroley]

Grafana Version - Grafana v10.0.2 (b2bbe10fbc)
Operating System - Windows 11

• What are you trying to achieve - I want to use Regex / Substring operation on a Template Variable called $SerialID

• How are you trying to achieve it - 1. I created a TextBox Template variable with the name SerialID which takes a 16 character user input. 2. The database source is Elasticsearch logs. 3. I need to extract substring from index 5-12 of the 16 character $SerialID value, and then use it to query a field called “id”.

• What did you expect to happen?
  This is what I have -
  

  
  
  And this is something I am trying to achieve - I want either substring or regex here
  
  

• What happened?
  If I have a look at the query inspector - It does not recognize the variable when substring is used -
  

  
  
  But it recognizes its value normally without the substring operation -
  
  

• Did you receive any errors in the Grafana UI or in related logs? If so, please tell us exactly what they were. - No errors by Grafana - just the fact that I am not able to do a basic regex on a template variable and would love to know how to write a query properly for ElasticSearch DB

• Did you follow any online instructions? If so, what is the URL?
  I also saw something like this -Elasticsearch template variables | Grafana documentation
  But I haven’t quite understood how it works or how to form my query based on the explanation above.

[yosiasz]

Is this the same as this thread?

How to add Regex to a TextBox Variable and use it inside a Query to visualize data from Elasticsearch

And another one Here it is with opensearch I spun up with sample data flight [image]

so from OM7MD0000DN0857 which part do you want?

Check this out

regex101: build, test, and debug regex

[roleyroley]

Oh yes - its the same thread -
The regex would be something like this -
/^.{5}(.{4})(.{2})(.{4})*/ out of which I want Group 1 and Group 3 and concatenate them.

Do you happen to know what the query would look like?
PS: Here is the link to what I am trying to achieve. regex101: build, test, and debug regex

[yosiasz]

if same thread can we close this one? it helps to keep things neat and tidy