https://community.splunk.com/t5/Splunk-Search/what-is-colour-code-of-boolean-while-using-endswith/m-p/547319#M155182 <P>That is a normal behaviour when you have those inside an atribute. They will work regardless. There are some cases the search does not colour the reserved words, commands etc.</P> Fri, 09 Apr 2021 09:00:30 GMT diogofgm 2021-04-09T09:00:30Z https://community.splunk.com/t5/Splunk-Search/what-is-colour-code-of-boolean-while-using-endswith/m-p/547288#M155168 <P>Hi all,&nbsp;</P><LI-CODE lang="markup">endswith=(notificationType="TestCompleted" OR notificationType="TestCancelled" OR notificationType="TestRejected" )</LI-CODE><P>&nbsp;this is my part of query.</P><P>when normally we use boolean like AND, OR they are in orange. but while using them with endswith, colour of booleans are grey.</P><P>so is it right, that colour of boolean is different? If not then how to correct that?&nbsp;</P> Fri, 09 Apr 2021 03:21:57 GMT https://community.splunk.com/t5/Splunk-Search/what-is-colour-code-of-boolean-while-using-endswith/m-p/547288#M155168 Learner 2021-04-09T03:21:57Z https://community.splunk.com/t5/Splunk-Search/what-is-colour-code-of-boolean-while-using-endswith/m-p/547319#M155182 <P>That is a normal behaviour when you have those inside an atribute. They will work regardless. There are some cases the search does not colour the reserved words, commands etc.</P> Fri, 09 Apr 2021 09:00:30 GMT https://community.splunk.com/t5/Splunk-Search/what-is-colour-code-of-boolean-while-using-endswith/m-p/547319#M155182 diogofgm 2021-04-09T09:00:30Z