The following search returns results:
"context"
But this one does not:
regex "context"
And neither does this:
regex _raw="context"
+Why not?+
I am using Splunk 4.3.3 and according to http://docs.splunk.com/Documentation/Splunk/4.3.3/SearchReference/Regex the previous 2 are valid and should return results.
I know that the word "context" is mentioned in my "_raw" field many times because I've exported a number of log events and found it there.
... View more
