Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to filter out search results where a field value ends with the $ character?

$
0
0
Hello Everyone, Am hitting a snag and need some help. So I have an index whereby we have many account names returned to us from an index. Some of these account names end in the `$` character. I am trying to filter any events where the account name ends in `$` out of the result set. I have tried `search NOT account_name = "*$"` but this doesn't seem to work. I am guessing that `$` is a reserved character or something as this works fine when filtering out other stuff not ending in a special character. Anyone got any hints for me? I would really appreciate it.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>