ES|QL CONTAINS function

×

string

String expression: input string to check against. If null, the function returns null.

substring

String expression: A substring to find in the input string. If null, the function returns null.

Returns a boolean that indicates whether a keyword substring is within another string. Returns null if either parameter is null.

ROW a = "hello"
| EVAL has_ll = CONTAINS(a, "ll")