Hi, I'm trying to get wildcard lookups to work using the "lookup" function. I've followed guidance to set up the "Match Type" for the fieldin the lookup definition as per Define a CSV lookup in S...
I have a search that uses some wildcards:
sourcetype="EPPWEB" source="/opt/log/*/web_server/info.log" WAT
| rex field=_raw "USER (?P<registrar>\[\d+-\w\w\]) downloading .*/(?<filename&g...
Hi,
I have a dropdown that lists individual values (example, 1,2,3,4,5) with a token num. The query looks like this
index=blah numberfield="$num$"
And that works just fine
What I'd like ...
I need some help on the syntax of wildcards in the search. I have multiple servers and I don't want to keep using OR. For example I have "server01" through "server21" and I sometimes want to just p...
I'm trying to use wildcards in a lookup file and am not able to get them working. I have referenced other posted answers but am not having success. Steps I have taken:
Created a lookup file c...
I have a lookup named tc with a field indicator. I wanted to search that indicator field in my firewall sourcetype with wildcards as below.
[|inputlookup tc|dedup indicator|eval i...
...rl_requested.csv" with that in "malicious.csv" and get only those url and description which has a match in "malicious.csv" . url_requested.csv lookup has url column with wildcard prefixed and suffixed. I h...
I have log files coming in from a Windows Server and file I can receive the required files when I specify the specific filename however I need to use a wildcard and it does not seem to be working....
Im trying to set a boolean based on a match in a string.
I want to set a value to 1 if it does not match ingestion* and set it to 0 if it does match.
The following example shows the problem:
...
...eturn _( 'source' ).contains(cell.field);
}, i want this with wildcard like this column to have any value before var CustomRangeRenderer = TableView.BaseCellRenderer.extend...