I have host=abc_cloud_aws_dev
host = abc_cloud_aws_qa
Here is my basic search string
index=myindex host=abc_cloud* , to display all the events , but I want to check and display events which are having abc_cloud and also which contains dev in as part of host
Will this work ?
index=myindex (host=abc_cloud* OR host=\*dev*)
yes it worked thanks