how do i search for the ? character?

[piebob]

"?" and escape permutations don't seem to work.

[Ayn · Accepted solution]

"?" seems to work just fine for me. Do you have an example of a search + log events that should match but don't?

You can also use regex and escape the question mark:

* | regex _raw="\?"