Dropdown wildcard

[dbcase]

Hi,

I have a dropdown that lists individual values (example, 1,2,3,4,5) with a token num. The query looks like this

index=blah numberfield="$num$"

And that works just fine

What I'd like to do is to be able to select ALL values (i.e. ). The dropdown would now have values of *,1,2,3,4,5). Easy enough. The question is how do I structure the query? By using the one above I get no matches because the numberfield is never = "".

Help?

[dbcase · Accepted solution]

Found it!

Change the * to %

then use the like command

search|where like(numberfield,"$num$")

[dbcase]

well darn it, the asterisk did show. The last sentence is supposed to read like this

What I'd like to do is to be able to select ALL values (i.e. *). The dropdown would now have values of *,1,2,3,4,5). Easy enough. The question is how do I structure the query? By using the one above I get no matches because the numberfield is never = "*".