<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk SDK - Search String with parameter having Spaces in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Splunk-SDK-Search-String-with-parameter-having-Spaces/m-p/390620#M171089</link>
    <description>&lt;P&gt;normal Java escape character () worked&lt;BR /&gt;
String searchQuery_string = "search message=\"Completed i*\"";&lt;/P&gt;</description>
    <pubDate>Fri, 24 May 2019 09:16:22 GMT</pubDate>
    <dc:creator>duddukuri</dc:creator>
    <dc:date>2019-05-24T09:16:22Z</dc:date>
    <item>
      <title>Splunk SDK - Search String with parameter having Spaces</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-SDK-Search-String-with-parameter-having-Spaces/m-p/390619#M171088</link>
      <description>&lt;P&gt;By using &lt;STRONG&gt;Splunk SDK&lt;/STRONG&gt;, able to use the below search string and get the results from SPlunk&lt;BR /&gt;
String searchQuery_string = "search * | head 100";&lt;/P&gt;

&lt;P&gt;We have a field by name &lt;STRONG&gt;message&lt;/STRONG&gt; in Splunk, which can have &lt;STRONG&gt;values with spaces&lt;/STRONG&gt;.&lt;BR /&gt;
Example message 1 : "Started initialization" &lt;BR /&gt;
Example message 2 : "Completed initialization in 86 ms"&lt;/P&gt;

&lt;P&gt;We want to run search with the message="Completed i*"&lt;BR /&gt;
In Splunk UI search this is working fine and giving results&lt;/P&gt;

&lt;P&gt;When tried with below as the Query string, &lt;STRONG&gt;ZERO Results&lt;/STRONG&gt;&lt;BR /&gt;
String searchQuery_string = "search message='Completed i*'";&lt;BR /&gt;
String searchQuery_string = "search message=Completed%20i*";&lt;/P&gt;

&lt;P&gt;Kindly help me in this regard&lt;/P&gt;</description>
      <pubDate>Wed, 30 Sep 2020 00:42:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-SDK-Search-String-with-parameter-having-Spaces/m-p/390619#M171088</guid>
      <dc:creator>duddukuri</dc:creator>
      <dc:date>2020-09-30T00:42:37Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk SDK - Search String with parameter having Spaces</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Splunk-SDK-Search-String-with-parameter-having-Spaces/m-p/390620#M171089</link>
      <description>&lt;P&gt;normal Java escape character () worked&lt;BR /&gt;
String searchQuery_string = "search message=\"Completed i*\"";&lt;/P&gt;</description>
      <pubDate>Fri, 24 May 2019 09:16:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Splunk-SDK-Search-String-with-parameter-having-Spaces/m-p/390620#M171089</guid>
      <dc:creator>duddukuri</dc:creator>
      <dc:date>2019-05-24T09:16:22Z</dc:date>
    </item>
  </channel>
</rss>

