Is there a way to only search * (asterisk)?

[abhaybhagat08]

Dear Experts ,

Please suggest an answer on a silly question

If my log contains *(star) as a word/character .

How we will be able to do it in Splunk .
As in Splunk * is considered as regex .

Is it possible.

Regards,
Abhay

[nembela]

According to the documentation the "where" or "regex" command should be used: https://docs.splunk.com/Documentation/Splunk/latest/Search/Wildcards#Searching_for_the_asterisk_char...

[somesoni2]

You can do like this

your base search | regex _raw=".*\*.*"

[DalJeanis]

or | search match(_raw,"[*]")

[somesoni2]

The match function is not available with | search command. Do you mean | where match(_raw,"[*]") (which works)?