Somewhere I read about using $abc$, to tell Splunk that *abc* is a fieldname
I can't find explanations in the docs, when and how it can be used. Can someone provide a link regarding this topic?
Cheers
Heinz
↧