I have a field named hello_world and a value of the field is *
I am writing a search where the results will not include this value *.
The problem is if I write for example:
I will get no results that have any value for field hello_world and at face value that makes sense. So how can I tell Splunk to say
You may need to do something like this:
answered 09 Jun '11, 09:50