Basically, I have log strings that I wanted to keep as a wildcard type to be able to search for exact substrings with either wildcard query *abc* or with regex /.*abc.*/. The problem is that Observability → Logs doesn't support Lucene, and KQL doesn't seem to support character escaping. So to search e.g. for phrase "first iteration" I either has to user Discover and search for *first\ iteration* or for /.*first iteration.*/
As a side note: it would be way more convenient if there was an option to invert regex anchoring. I.e. to add .* to the side if it is not present, and to remove if .* is present. Most of the search strings over wildcard message field are done like *some\ stuff* right now. Exact search for "some stuff" substring would be very convenient.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.