Search Fields Through a Given Pattern - Example 2
Query
logscale
wildcard(field=animal, pattern=horse, ignoreCase=true)
Introduction
Given the following events:
field | value |
---|---|
animal | horse |
animal | Horse |
animal | duck |
animal | HORSES |
animal | crazy hOrSe |
animal | hooorse |
animal | dancing with horses |
Finds events where the field
animal contains the
value horse
, and makes it
case-insensitive.
Step-by-Step
Starting with the source repository events.
- flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[/Filter/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;logscale
wildcard(field=animal, pattern=horse, ignoreCase=true)
Searches elements in the field animal that match
horse
, case-insensitive. Event Result set.
Summary and Results
The result is a list of events where field
animal contains any
capitalization of horse
(HORSE
,
hOrsE
,
Horse
, etc.).
The query used is equivalent to
animal=/\Ahorse\z/i
.
Note that it is anchored.