Splunk ITSI

Is SPlunk Query casesensitive ?

vickyjaiswal
New Member

Hi Guys,

As I am novice to Splunk .Only I want to know is splunk case sensitive or not .Sometimes my search is work with same query some times it does not work .

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

SPL is case sensitive except for values in the search command. Example:

host="foo" | stats dc(A) by b

host, A, b is case sensitive, "foo" is not.

0 Karma

riddhichandaran
Explorer

Field values are not case sensitive
Field names are always case sensitive, in the search command and in other commands.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...