Query evaluation uses the new function to extract fields from payloads.

pkg/log/query_eval.go

@@ -73,12 +73,11 @@ func (expr qExpr) testRecord(rec Record) bool {
 		payload = bytes.TrimLeft(payload, " \t\n\r")
 	}
 	if expr.lhs.field > 0 {
-		fld := expr.lhs.field
-		flds := bytes.Fields(payload)
-		if fld > len(flds) {
+		min, max, ok := fieldNDelims(payload, expr.lhs.field-1)
+		if !ok {
 			return false
 		}
-		payload = flds[fld-1]
+		payload = payload[min:max]
 	}
 
 	if expr.rhs.rhsType == empty {