How do i search data and return results on content that has a colon in it?
Do i need to use regex to break it out?
As far as I have seen, you can directly provide the content in the search and it works with (best practice) or without quotes.
e.g. index=abc http://
surrounding the search string in double quotes should be sufficient (ie. "Server: Apache"). Is that not working?
The data is in JSOn format, would that make a difference?