Hi Guys,
As I am novice to Splunk .Only I want to know is splunk case sensitive or not .Sometimes my search is work with same query some times it does not work .
SPL is case sensitive except for values in the search
command. Example:
host="foo" | stats dc(A) by b
host
, A
, b
is case sensitive, "foo"
is not.
Field values are not case sensitive
Field names are always case sensitive, in the search command and in other commands.