I have lookup like below:
Class Subclass Keyword
X Y feed*onboard*
z u * health*,hc,rule
I want to search those keywords in main query and want take the events based on keyword search.
I am searching like below:
index=abc
[| inputlookup keyword_sheet| dedup Keyword | fields Keyword | eval summary=split(Keyword,",")|mvcombine summary|rename summary as search|format]
when i am searching like above,I am getting below error in job details
Search: The term 'Keyword=" feed*onboard*" contains a wildcard in the middle of a word or string. This might cause inconsistent results if the characters that the wildcard represents include punctuation.
Any ideas will be appreciated in getting the desired output.
