I have a query for dropdown dashboard which is not working
index=main reqUser="*" source="logs"| dedup reqUser and token is userReq from this i select one of it which will be used to search eg reqUser="local \abc"
index=main reqUser={userReq} | stats avg(reqUser) by source, but its not showing any logs. i noticed the problem is local \abc which only accepts local \\abc. anyway i can rewrite this query?
