Does anyone know if there is a bug with using * as a wildcard in a Text box variable? When I use * as a wildcard in my text box variable it returns No Data. If I use * instead of the variable in my query I get results. Looking at the query inspector I see the queries are much different:
Query with * in the query, no variable:
AND * AND * AND * AND *"}}]}},
Query with * in the default value, text box variable used:
AND * AND * AND * AND \\*"}}]}},
what datasource is this query running against
Please post the full query with the variable being used
kubernetes.namespace_name.keyword: ${customer} AND ${pwiseLogAppender} AND ${custom} AND ${logtype} AND ${thread}
Query inspector:
"data": "{\"search_type\":\"query_then_fetch\",\"ignore_unavailable\":true,\"index\":[\"dev2-cust-*-logs-2023.08.11\"]}\n{\"size\":2000,\"query\":{\"bool\":{\"filter\":[{\"range\":{\"@timestamp\":{\"gte\":1691746543247,\"lte\":1691768143247,\"format\":\"epoch_millis\"}}},{\"query_string\":{\"analyze_wildcard\":true,\"query\":\"kubernetes.namespace_name.keyword: pw\\\\-mn\\\\-bmap\\\\-05\\\\-1001389117 AND * AND * AND * AND \\\\*\"}}]}},\"sort\":[{\"@timestamp\":{\"order\":\"desc\",\"unmapped_type\":\"boolean\"}},{\"_doc\":{\"order\":\"desc\"}}],\"script_fields\":{},\"aggs\":{\"1\":{\"date_histogram\":{\"field\":\"@timestamp\",\"min_doc_count\":0,\"extended_bounds\":{\"min\":1691746543247,\"max\":1691768143247},\"format\":\"epoch_millis\",\"fixed_interval\":\"15000ms\"},\"aggs\":{}}},\"highlight\":{\"fields\":{\"*\":{}},\"pre_tags\":[\"@HIGHLIGHT@\"],\"post_tags\":[\"@/HIGHLIGHT@\"],\"fragment_size\":2147483647}}\n",