The search is obviously part of a drilldown because nobody in his right mind would create | eval earliestQual=match("-24h@h","^\d") so it probably started out as something like | eval earliestQual=match($field_selector_value$,"^\d") , which totally could happen and makes sense. Now, back to your question, what is it doing? . It is checking to see if the string that is being tested (in this case -24@h ) begins with a digit (which in this case, it does not). Now, why is it doing that? . Who knows.
... View more