I have data looks like below
AccountName
account1-abc$
account2-abc$
account3-xyz$
account4
I want to filter out the account name end with $ with following query
AccountName!=*$
I expect it only return account4 however it does not return anything. if I do following query
AccountName!=*adc$
it does only return me
account3-xyz$ and account4
Any suggestion why the first search does not do what expected but the second query did what expect? is that because $ is special character?
Thanks in advance
hi @samlinsongguo
try like this
|makeresults |eval AccountName="account1-abc$" |append [|makeresults |eval AccountName="account2-abc$" ]|append [|makeresults |eval AccountName="account3-xyz$" ]|append [|makeresults |eval AccountName="account4" ] |table AccountName |where NOT AccountName like ("%$")
hi @samlinsongguo
try like this
|makeresults |eval AccountName="account1-abc$" |append [|makeresults |eval AccountName="account2-abc$" ]|append [|makeresults |eval AccountName="account3-xyz$" ]|append [|makeresults |eval AccountName="account4" ] |table AccountName |where NOT AccountName like ("%$")
tried my log it looks like working thank you for your help