Note that there are literals with and without quoting and that there are data field as well as date source selections done with an “=”: Simple searches look like the following examples. Splunk Cheat Sheet Edit Cheat Sheet SPL Syntax Basic Searching Concepts.
