Hello, I need to count the event log line contains AAA|Y|42 but "|" is the pipeline command so that I got error as the following search: I tried to use " double quote at two sides of the string but no return result. index=transaction sourcetype=transaction_270 *AAA|Y|42* | chart count by region_id, partner_id Splunk will treat Y is the command and got this error: Search Factory: Unknown search command 'y'. Please help me with solution. Thank you very much. ... View more