Search Multiple Fields Through a Given Pattern

Query

logscale
wildcard(field=[plant,animal], pattern=horse, ignoreCase=false)

Introduction

Given the following events:

fieldvalue
animalhorse
animalHorse
animalduck
animalHORSES
animalcrazy hOrSe
animalhooorse
animaldancing with horses
plantdaisy
planthorseflower

Search multiple fields for a value allows you to find events where the field animal or plant contains the exact value horse, and makes it case-sensitive.

Step-by-Step

  1. Starting with the source repository events.

  2. flowchart LR; %%{init: {"flowchart": {"defaultRenderer": "elk"}} }%% repo{{Events}} 0[/Filter/] result{{Result Set}} repo --> 0 0 --> result style 0 fill:#ff0000,stroke-width:4px,stroke:#000;
    logscale
    wildcard(field=[plant,animal], pattern=horse, ignoreCase=false)

    Searches elements in the fields animal and plant that match horse.

  3. Event Result set.

Summary and Results

The result is a list of events where either the field animal or plant has the exact value horse.

The query used is equivalent to animal="horse" plant="horse".