characters that need to be in quotations

[camillak]

When you search in Splunk, I know some characters need to be in quotations-- field="value with spaces". I'm trying to get a list of all of those characters and what the technical term for them is. I know I've seen this in Splunk documentation, but can't find it again. of course.
Not a technical question but if someone has an answer on this then thank you!

[camillak · Accepted solution]

I was just looking for a doc that I eventually found: http://docs.splunk.com/Documentation/Splunk/6.5.2/Search/Aboutsearchlanguagesyntax#Quotes_and_escapi...

Just general guidelines not a technical how to. Anyway question answered.

[DalJeanis]

Great! Be sure to mark your answer "accepted".

[DalJeanis]

It seems like it is highly context-specific. In some places, you need single-quotes, others double-quotes, and so on, based on the underlying languages. Inside of regexes, spaces don't matter but you have to escape the twelve(?) regex operator characters... usually... Sigh.

I hope someone has a good answer for you. 😉