Archive
Highlighted

How do bloomfilters work with wildcard searches?

Champion

Since the value is variable its not clear how Splunk would compute this.

Highlighted

Re: How do bloomfilters work with wildcard searches?

Splunk Employee
Splunk Employee

I don't think wildcard searches and bloom filters are compatible due to the very nature of bloom filters, unless we have implemented some sort of expansion function that I don't know about.

Highlighted

Re: How do bloomfilters work with wildcard searches?

Splunk Employee
Splunk Employee

I've seen a post from ~sideview suggesting that you can try (*foo OR foo*) if the term appears at a word boundary. If the string you're looking for is foobarbaz, then a search for (*bar OR bar*) won't help you, but it's worth a shot for those substrings that do abut word boundaries.

0 Karma