I need to see all events with fields that have “PROD*” in name, e.g. “PROD deploy”, “PROD update”, etc.
index=myIndex sourcetype=mySourceType "PROD*"="*"
doesn’t work
..and if event has “PROD*” in field name I need to get the value
How is it possible?