Hi, from query below I want to filter the results by fieldname matching pattern and fieldsummary should only return the text matching the search string from post result set, my text input is $filter$, how can this query be modified to return data that matches $filter$ ?
environment=test sourcetype = asp afi | fieldsummary maxvals=10
environment=test sourcetype = asp afi
| fieldsummary maxvals=10
| table $filter$
you should do care token's value.
environment=test sourcetype = asp afi
| fieldsummary maxvals=10
| table $filter$
you should do care token's value.
filter is only for the fieldname matches, above query is working for $*$ , not working for other filters
Found it, filter needs to move before fieldsummary
environment=test sourcetype = asp afi | fields $filter$ |
| fieldsummary maxvals=10
Thanks for all the answers
not working for other filters
other?