Splunk Recipes
Jump to navigation
Jump to search
Internal
Searching with Fields
When searching for a specific field, use the following syntax:
field_name="field value"
Field names are case sensitive. Field values are not case sensitive.
Wildcards can be used in field values.
Quotation marks are required when the field values include spaces.