https://community.splunk.com/t5/Splunk-Search/how-do-i-search-for-the-character/m-p/73770#M18496 <P>"?" seems to work just fine for me. Do you have an example of a search + log events that should match but don't?</P> <P>You can also use <CODE>regex</CODE> and escape the question mark:</P> <PRE><CODE>* | regex _raw="\?" </CODE></PRE> Mon, 04 Apr 2011 00:47:11 GMT Ayn 2011-04-04T00:47:11Z https://community.splunk.com/t5/Splunk-Search/how-do-i-search-for-the-character/m-p/73769#M18495 <P>"<EM>?</EM>" and escape permutations don't seem to work.</P> Mon, 04 Apr 2011 00:06:20 GMT https://community.splunk.com/t5/Splunk-Search/how-do-i-search-for-the-character/m-p/73769#M18495 piebob 2011-04-04T00:06:20Z https://community.splunk.com/t5/Splunk-Search/how-do-i-search-for-the-character/m-p/73770#M18496 <P>"?" seems to work just fine for me. Do you have an example of a search + log events that should match but don't?</P> <P>You can also use <CODE>regex</CODE> and escape the question mark:</P> <PRE><CODE>* | regex _raw="\?" </CODE></PRE> Mon, 04 Apr 2011 00:47:11 GMT https://community.splunk.com/t5/Splunk-Search/how-do-i-search-for-the-character/m-p/73770#M18496 Ayn 2011-04-04T00:47:11Z