Another way of generating a random string would be to combine a few evals containing data and then concatenate random substrings of those evals. As an example, this will create a random 8 character alpha-numeric string with special characters. | makeresults | eval rand_lower="abcdefghijklmnopqrstuvwxyz" ,rand_upper=upper("abcdefghijklmnopqrstuvwxyz") ,rand_number=1234567890 ,rand_special="!#$%*" ,len_lower=len(rand_lower) ,len_upper=len(rand_upper) ,len_number=len(rand_number) ,len_special=len(rand_special) ,RandomString=substr(rand_upper, (random() % len_upper), 1).substr(rand_lower, (random() % len_lower), 1).substr(rand_lower, (random() % len_lower), 1).substr(rand_special, (random() % len_special), 1).substr(rand_lower, (random() % len_lower), 1).substr(rand_number, (random() % len_number), 1).substr(rand_upper, (random() % len_upper), 1).substr(rand_lower, (random() % len_lower), 1) | fields - rand_* len_* ... View more

I was able to deploy alert_actions.conf to a SH Cluster but was only able to get the settings in that file to work if i also deployed a default.meta file within the same app with the following entry: [alert_actions] export = system ... View more

I use evals to search my * values as needed. As an example if you are searching against savedsearches, you will see the cron_schedule of a saved search which will most likely include asterisks. I would think this would also work in your situation: | eval containsAsterisk=if(_raw LIKE "%C*%", "Yes", "No") | search containsAsterisk=Yes ... View more