i can not search custom field values(with space character) that JSON type data coming from jira app.
for example
customfield1 ="abc abc"
but if I use spath function inside Splunk search I can filtre the customfield value
index=jira
| spath "fields.customfield1"
| search "fields.customfield1"="abc abc"
*results found.*
index=jira "fields.customfield1"="abc abc"
*No results found.*
**what can i do ?**
↧