Dashboards & Visualizations

Which data type is allowed for using a wildcard?

qxu5715
Explorer

I'm a rookie at splunk and trying to implement a wildcard search via input type text in a dashboard. Unfortunately it seems, that the
constellation "Wildcard", "input type="text"" and data type "UINT32" won't work.
I've tested the search with other data types and it worked well. Has anybody made same experience with this and even more, has found a way to solve this kinda problem?
Please, dont ask why "UINT32" is used, it was a decision made by our company.

Thanks so far!

0 Karma

woodcock
Esteemed Legend

If your question is can I search for a literal asterisk, then the answer is no. You'll have to search more broadly and then trim down the results with another filtering command that can handle a literal asterisk, such as regex like this:

| regex _raw="hello\*world"
0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...