Splunk Search

Usage of Wildcard in middle of search string

splunkuser1948
Engager

Hi,

I read from splunk docs that we should avoid using wildcards `*` in the middle of a string.
Now, does this apply to  `%` wildcard used in `like()` too ? Ex:  like(some_field ,"abc%def")
From my testing it seems , `%` is able to match punctuations too unlike `*`.

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

I believe that caution pertains to the search command itself rather than the like function.  Consider submitting feedback on that documentation page asking the Docs team to clarify.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...