I'm looking into OpenSearch and trying out the dashboards & data querying but am having some difficulty with some specific queries I'd like to run.

The data I have streaming into OpenSearch is a set of custom error logs which the @message field contains json such as: ...{"code":400,"message":"Bad request","detail":"xxxx"}... (the entire message field is not valid json as it contains other data too)

I can specifically query for the code field with "code:400" but would like a more generic query to match all 4XX codes but adding any type of wildcard or range breaks the query and the quotes surrounding it are required otherwise the results include code OR 400

Is there any way to achieve this with the kind of data I have or is this a limitation in the querying syntax?