I would suggest to use 'match' function instead of LIKE here.
example usage: (Runanywhere sample search)
| gentimes start=-1 | eval temp="Somesh%Soni Somesh#Soni" | table temp | makemv temp | mvexpand temp | where NOT match(temp,".*%.*")
I would suggest to use 'match' function instead of LIKE here.
example usage: (Runanywhere sample search)
| gentimes start=-1 | eval temp="Somesh%Soni Somesh#Soni" | table temp | makemv temp | mvexpand temp | where NOT match(temp,".*%.*")
Thank you. It works.
the src_ip values are like this : xx.zz.dd.hh exple( src_ip=127.0.0.1)
try like this:
NOT like(src_ip, "127.%.%.%")
or
NOT like(src_ip, "%.%.%.%")
Sorry, it doesn't solve the problem. And in my case src_ip is both IPv4 and IPv6.