Hello everybody, using Splunk 8.1.0 and relaterd to https://docs.splunk.com/Documentation/Splunk/8.1.0/Search/Parsingsearches trying to add comments via ```my_comment``` to search request, but there is error.
Only `comment("my_comment")` works, but it is not what i need...
How to add comment to search request like /* my_comment */ or // my_comment ?
Hi @sergeblr may we know your full search query(after hiding hostname, important field-values) and Splunk version please
Hi, @inventsekar
index=apps host=host* CASE(ERROR) AND "com.*" ```some comment here```
index=apps host=host* ERROR ```some comment here```
are you able to do this search, please check.
Returns
Error in 'SearchParser': You must provide a macro expression.
Splunk 8.0.1
please try this... (this works fine for me)
index=_internal CASE(ERROR) /*test*/
PS - karma points appreciated, if this solves your question, please accept it as the solution. thanks.
For this query /*test*/ parsed as:
'/' symbol, THEN any text (*), THEN 'test' word, THEN again any text (*) and '/' symbol, so this is not parsed as comment :((