I want to search an exact phrase, but surronded by wildcards. I want to be able to do this with and without specifying the field.
|search "help me"
What am I doing wrong? I do I get Splunk to accept space as a character within a phrase?
you can do something like this:
your_search "*help me*"
your_search my_field="*help me*"
but remember that using wildcards, you haven't a quick search especially without fields.
Anyway, you can use spaces inside quotes as a normal char, if instead you don't use quotes, space is a separator.
View solution in original post
Thank you Ciao!