---
title: find / text
description: |
  The `find` command performs a free-text search within a specified keypath. It acts as a
  shorthand for combining `filter` with a [text match](../text_match_operator.mdx) (`~`).

  This command is ideal for quick searches across log messages or string fields
  where full parsing is unnecessary. The alias `text` can be used
  interchangeably with `find`.
url: https://coralogix.com/docs/dataprime/language-reference/commands-reference/find_text/
product: dataengine
feature: DataPrime Language
feature_id: dataprime-language
feature_identifier: dataengine/dataprime-language
last_updated: '2026-10-21'
---

# `find / text`

## Description

The `find` command performs a free-text search within a specified keypath. It acts as a shorthand for combining `filter` with a [text match](https://coralogix.com/docs/dataprime/language-reference/text_match_operator.md) (`~`).

This command is ideal for quick searches across log messages or string fields where full parsing is unnecessary. The alias `text` can be used interchangeably with `find`.

## Syntax

```
(find|text) <free-text-string> in <keypath>
```

## Example

**Use case: Find logs mentioning a specific AWS availability zone**

When investigating deployment behavior across regions, you might want to return only logs referencing a particular availability zone, without parsing or restructuring the message field.

### Example data

```
{ "msg": "eu-west-1a instance deployed" },

{ "msg": "eu-west-1b instance deployed" },

{ "msg": "eu-west-1c instance deployed" }
```

### Example query

```
find 'eu-west-1a' in msg
```

### Example output

```
{ "msg": "eu-west-1a instance deployed" }
```

The `find` command returns only documents containing the specified substring. It’s particularly useful for quickly searching raw log fields.