"filebeat-*", "type": "dataView" }, "filters": [], "interval": "auto", "query": { "language": "kuery", "query": "log.level:%20%22error%22%20" }, "sort": [ [ "@timestamp", "desc" ] ] } 1. RISON to JSON 2.KQL to ElasticSearch Query DSL {"bool":{"filter":[{"bool":{"should":[{"term":{ “log.level":{ "value":"error" } }}]}}]}}