Hello all.
I've been having some trouble with a tricky query. Essentially, I want to return all events that contain a certain field, with a specific value excluded, and combine that with all events that also contain nothing for that particular field.
For excluding the field value, I would use:
... field!=value
And for all events that do not have a value for that field, I would use:
... NOT field="*"
I have no idea how to combine these, as one requires the field and the other completely excludes it. I have tried:
<search> field!=value
| fields -field
But it doesn't work, as I believe I'm basically applying a filter but doing nothing with it. Any help will be greatly appreciated! Thank you.
... View more