https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204883#M59527 <P>In what command do you want to escape the *?</P> Fri, 04 Sep 2015 12:21:36 GMT richgalloway 2015-09-04T12:21:36Z https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204882#M59526 <P>We can use <CODE>\</CODE> as an escape sequence for special characters ",",(,),[,] and so on. How to use for * character?</P> Fri, 04 Sep 2015 11:45:35 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204882#M59526 Madhan45 2015-09-04T11:45:35Z https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204883#M59527 <P>In what command do you want to escape the *?</P> Fri, 04 Sep 2015 12:21:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204883#M59527 richgalloway 2015-09-04T12:21:36Z https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204884#M59528 <P>If I understand your meaning, you are trying to find events that contain the asterisk (*) character. If so, then this is not possible using the backslash since Splunk treats the asterisk as a major breaker (see Event Segmentation below). According to the Search manual, if you want to search for an asterisk you will need to run a post-filtering regex search on the data, such as:</P> <PRE><CODE>index=_internal | regex ".*\*.*" </CODE></PRE> <P>References:<BR /> Event Segmentation - <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Data/Abouteventsegmentation">http://docs.splunk.com/Documentation/Splunk/6.2.1/Data/Abouteventsegmentation</A><BR /> Search Manual (About Seach Language Syntax) - <A href="http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Aboutsearchlanguagesyntax">http://docs.splunk.com/Documentation/Splunk/6.2.1/Search/Aboutsearchlanguagesyntax</A></P> Fri, 04 Sep 2015 16:33:20 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204884#M59528 badarsebard 2015-09-04T16:33:20Z https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204885#M59529 <P>oh thanks badarsebard</P> Mon, 07 Sep 2015 11:35:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-Use-in-escape-sequence/m-p/204885#M59529 Madhan45 2015-09-07T11:35:31Z