How-To: Field with Any Value When looking for a field that has been set with any value, use the wildcard match: statuscode = * Non-existant Field To check whether a field exists, negate the wildcard match: statuscode != * Empty Strings There are no null values within LogScale. To look for a field that exists but that does not have an assigned value (i.e. an empty string), search for that explicitly using: statuscode = Exclude RFC1819 and Non-Routable IP Addresses