Wildcards and exclusions

I have a Pie Chart showing blocked URLs for example and I want to exclude a domain and its sub domains

and *.domain.com does not seem to do the trick.

any ideas?

hi @CKMW,

Is this a filter you're putting on the query bar in Kibana?

If so, the Lucene query-language doesn't allow wildcard searches at the start of a string. cf. https://lucene.apache.org/core/2_9_4/queryparsersyntax.html. That's likely the issue.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.