Dashboards & Visualizations

Searching for a partial string in a loadjob

strehb18
Path Finder

Hello,

I generally use the following format to limit specific search results from panel to panel. However, in this case I would like to search for anything containing the string. 

[|loadjob $work_center_base$
| stats values(work_center) as location] 

This would limit the results in my search to only what is in the work_center field. I would like to match anything that contains what is in the location field. I won't this as the locations have more description after the work_center. 

ex:

work_center              

1CAP1
1CAP2
1CAP3
1CAP4

location  (examples to match) 

1CAP1-E3

1CAP2-W4

1CAP1-W1 

1CAP4-E1 ...

I am wondering if I can alter my search to match these and keep all locations that contain partials of work_center. 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...