Search Fields Through a Given Pattern - Example 2

Query

logscale
wildcard(field=animal, pattern=horse, ignoreCase=true)

Introduction

Given the following events:

fieldvalue
animalhorse
animalHorse
animalduck
animalHORSES
animalcrazy hOrSe
animalhooorse
animaldancing with horses

Finds events where the field animal contains the value horse, and makes it case-insensitive.

Step-by-Step

  1. Starting with the source repository events.

  2. flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[/Filter/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
    logscale
    wildcard(field=animal, pattern=horse, ignoreCase=true)

    Searches elements in the field animal that match horse, case-insensitive.

  3. Event Result set.

Summary and Results

The result is a list of events where field animal contains any capitalization of horse (HORSE, hOrsE, Horse, etc.).

The query used is equivalent to animal=/\Ahorse\z/i.

Note that it is anchored.