Cannot filter field from character

[jvaira]

Hello,
I am trying to use a filter to filter out any results where the objectname field contains the character ~ This character could be anywhere in the field so I'm assuming I need to use wildcard characters but have tried combinations of *~* "*~*" etc with no luck. Please see attachment for example.

[mbellerue]

You have the right of it. If you do not want to see any logs that contain a ~, then you would use a mustNot filter with *~*. It looks like you're getting no results at this point. Can you give me a screenshot of what it looks like without that one mustNot filter applied?

[jvaira]

Hello,
If I remove that filter I get about 17k results and a lot of them do not contain the ~ character. For example one of them has D:\Clients\5439124\Abacus\v23\ads040.net listed in the objectname field.

[mbellerue]

I've tried this a number of different ways, and I'm not getting the results I want. Upon doing a little digging, it looks like ~ is a Lucene query operator, so I don't think we're going to be able to filter on it the way we'd like to.