Search for percent symbol in log entries

[castle1126]

Our web server logs have percent symbols in the entries. I am able to search for certain logs by using REGEX (e.g. REGEX _raw=\/searchresults.html\?ab\=12345\%abc123). But my users are not REGEX savvy. Is there a way to search for characters like %, etc and not use REGEX?

Thanks! Steve

[Jeremiah]

It wouldn't work if you were trying to search a portion of a string between breakers. In your example, searching for "%" should work ok, but "%abc" would not. So just add a wildcard to the search "%abc*".

[gkanapathy · Accepted solution]

Seems to me you can really just search for "%" or "25%", either with or without the quotes. Works for me, at least with the default segmentation settings.

[castle1126]

Thanks! This worked great!

[ftk]

You should be able to search just for the percent symbol without escaping it. You can use the backslash to escape special characters such as quotes and backslashes.

index=blah %

Searches index blah for all entries with percent signs.

index=blah \%

works as well.