Help me create a search query

[Александр Коледа]

Hello, please help me create a search query.
I have events that contain the field data.win.eventdata.objectName, and the values ​​for these fields are D:\\UserFiles\\GeneralTables\\Folder1, D:\\UserFiles\\GeneralTables\\Folder2, D:\\UserFiles\\GeneralTables\\Folder3, and so on.
How can I create a search query to select all events containing part of the field value (D:\\UserFiles\\GeneralTables\\Folder*). Wildcards don't work in the search.

[Manuel Pedro Gomez Castro]

Hi!

I've run a test on my local environment and it would seem that wildcards are allowed on the search field

In order to run the query you are attempting, you would need to escape the colon as well, so it would likely look something like
data.win.eventdata.objectName: D\:\\UserFiles\\GeneralTables\\Folder*