I'm trying to have the dashboard return all results if the text field is * or return all phone numbers with a partial search in the text box. <input type="text" token="PhoneNumber" searchWhenChanged="true">
<label>Phone number to search</label>
<default>*</default>
</input> The search on the dashboard panel: index="cellulardata" | where if ($PhoneNumber$ ="*", (like('Wireless number and descriptions',"%"),like('Wireless Number and descriptions',"%$phonenumber$%" ) | eval Type=if(like(lower('Charge description'), "%text%") OR like(lower('Charge description'), "%ict%"), "Text", "Voice") | eval Direction=if (Type="Voice" AND 'Called city_state' = "INCOMING,CL","Incoming","Outgoing") | eval datetime =Date." ".Time | eval _time=strptime (datetime,"%m/%d/%Y %H:%M") | eval DateTime=strftime(_time, "%m/%d/%y %I:%M %p") | eval To_from=replace (To_from,"\.","") | table DateTime, "Wireless number and descriptions", To_from, Type, Direction |rename "Wireless number and descriptions" as Number | sort -DateTime The query returns no results no matter if the text field is empty or not. I've removed the entry below from the search, so I know the rest of the search works: where if ($PhoneNumber$ ="*", (like('Wireless number and descriptions',"%"),like('Wireless Number and descriptions',"%$phonenumber$%" I've tried comparing this to other dashboards I've seen and searching google, but no luck for some reason.
... View more