Keywords and Field name restrictions.

[rahulrwt23]

Can we search keywords in Splunk?
Is field name restricted to 15 characters only?
How can I name fields with more than 15 characters?

[gcusello · Accepted solution]

Hi rahulrwt23,
to search keywords use brackets (").
you can use more than 15 chars.
You can use the name you like, remember that to use spaces in field names isn't a good idea, anyway you can do it using brackets (").
Bye.
Giuseppe

[rahulrwt23]

Thanks
It was helpful.

[Javip]

Splunk name field isn't restricted to 15 characters... what query are you trying to test?