Dashboards & Visualizations

Which data type is allowed for using a wildcard?

qxu5715
Explorer

I'm a rookie at splunk and trying to implement a wildcard search via input type text in a dashboard. Unfortunately it seems, that the
constellation "Wildcard", "input type="text"" and data type "UINT32" won't work.
I've tested the search with other data types and it worked well. Has anybody made same experience with this and even more, has found a way to solve this kinda problem?
Please, dont ask why "UINT32" is used, it was a decision made by our company.

Thanks so far!

0 Karma

woodcock
Esteemed Legend

If your question is can I search for a literal asterisk, then the answer is no. You'll have to search more broadly and then trim down the results with another filtering command that can handle a literal asterisk, such as regex like this:

| regex _raw="hello\*world"
0 Karma
Get Updates on the Splunk Community!

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Automatic Discovery Part 2: Setup and Best Practices

In Part 1 of this series, we covered what Automatic Discovery is and why it’s critical for observability at ...