# Fuzzy search all fields

Copy as Markdown[Open in ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fdataprime%2Fcookbook%2Ffuzzy_search_all_fields.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)[Open in Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fdocs-docusaurus.kinsta.page%2Fdataprime%2Fcookbook%2Ffuzzy_search_all_fields.md%20and%20help%20me%20with%20my%20question%20about%20this%20Coralogix%20documentation%20page.)

## Problem / Use case[​](#problem--use-case "Direct link to Problem / Use case")

Need to locate a string in logs when you’re not sure which key holds it.

## Query / Solution[​](#query--solution "Direct link to Query / Solution")

```
source logs

| filter $d ~~ 'eu-west'
```

*Searches all top-level fields for the substring `eu-west` and returns matching events.*

### Equivalent query[​](#equivalent-query "Direct link to Equivalent query")

An equivalent way of making the same query is to use `wildfind`.

```
source logs

| wildfind 'eu-west'
```

## Expected Output[​](#expected-output "Direct link to Expected Output")

```
{

  "region": "eu-west-1a",

  "message": "Instance deployed"

}
```

Any document that contains the term anywhere among its root-level keys surfaces in the result set.

Note

Not shown here is the rest of the document.

## Variations[​](#variations "Direct link to Variations")

* **Combine with other filters**

  ```
  source logs

  | $d ~~ 'timeout' 

  | filter $m.severity == 'Error'
  ```

### Alternate query[​](#alternate-query "Direct link to Alternate query")

```
source logs

| wildfind 'timeout'

| filter $m.severity == 'Error' 
```

* **Anchor to whole words** Use regex boundaries:

  ```
  $d ~~ /\beu-west\b/
  ```

* **Wild-text vs. field-specific** Prefer `$d ~~` when you truly don’t know the location; otherwise use `field ~ 'text'` for better performance.

## TL;DR[​](#tldr "Direct link to TL;DR")

`$d ~~ '<text>'` or `wildfind '<text>'`is for free-text hunting across every root field—quick, broad, and perfect when the key is a mystery.