https://community.splunk.com/t5/Splunk-Search/create-dynamic-search-from-lookup/m-p/399184#M190854 <P>I have lookup like below:<BR /> Class Subclass Keyword<BR /> X Y feed*onboard*<BR /> z u * health*,hc,rule</P> <P>I want to search those keywords in main query and want take the events based on keyword search.</P> <P>I am searching like below:<BR /> index=<EM>abc</EM> <BR /> [| inputlookup keyword_sheet| dedup Keyword | fields Keyword | eval summary=split(Keyword,",")|mvcombine summary|rename summary as search|format]</P> <P>when i am searching like above,I am getting below error in job details<BR /> Search: The term 'Keyword=" feed*onboard*" contains a wildcard in the middle of a word or string. This might cause inconsistent results if the characters that the wildcard represents include punctuation.</P> <P>Any ideas will be appreciated in getting the desired output.</P> Wed, 30 Sep 2020 01:23:54 GMT uddhav 2020-09-30T01:23:54Z https://community.splunk.com/t5/Splunk-Search/create-dynamic-search-from-lookup/m-p/399184#M190854 <P>I have lookup like below:<BR /> Class Subclass Keyword<BR /> X Y feed*onboard*<BR /> z u * health*,hc,rule</P> <P>I want to search those keywords in main query and want take the events based on keyword search.</P> <P>I am searching like below:<BR /> index=<EM>abc</EM> <BR /> [| inputlookup keyword_sheet| dedup Keyword | fields Keyword | eval summary=split(Keyword,",")|mvcombine summary|rename summary as search|format]</P> <P>when i am searching like above,I am getting below error in job details<BR /> Search: The term 'Keyword=" feed*onboard*" contains a wildcard in the middle of a word or string. This might cause inconsistent results if the characters that the wildcard represents include punctuation.</P> <P>Any ideas will be appreciated in getting the desired output.</P> Wed, 30 Sep 2020 01:23:54 GMT https://community.splunk.com/t5/Splunk-Search/create-dynamic-search-from-lookup/m-p/399184#M190854 uddhav 2020-09-30T01:23:54Z