Search Fields Through a Given Pattern - Example 1

Query

logscale
wildcard(field=animal, pattern=horse, ignoreCase=false)

Introduction

Given the following events:

fieldvalue
animalhorse
animalHorse
animalduck
animalHORSES
animalcrazy hOrSe
animalhooorse
animaldancing with horses

Finds events where the field animal contains the exact value horse, and makes it case-sensitive.

Step-by-Step

  1. Starting with the source repository events.

  2. flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[/Filter/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
    logscale
    wildcard(field=animal, pattern=horse, ignoreCase=false)

    Searches elements in the field animal that match horse.

  3. Event Result set.

Summary and Results

The result is a list of events where field animal has the exact value horse.

The query used is equivalent to animal="horse" .