A Unicode string. Does not have to be quoted unless characters in the string may be misinterpreted as syntax, for example a space. When quoted, the string must be enclosed in double quotes ("). Contents of the string including alphanumeric and punctuation characters.

If unquoted, then LogScale will attempt to match to an existing reserved word before interpreting the value. See Character Table for a list of supported values.

hostname
username
error

"error message"
"user@example.com"
"192.168.1.1"

Quoting of special characters uses the backslack notation; for example \t (tab) or \n (newline).

"Line 1\nLine 2"
"Column1\tColumn2"
"Path: C:\\Users\\Admin"

format("User: %s, Status: %d", field=[username, status])

Functions using this Type: array:contains(), array:dedup(), array:drop(), array:eval(), array:exists(), array:filter(), array:intersection(), array:length(), array:reduceAll(), array:reduceColumn(), array:reduceRow(), array:regex(), array:rename(), array:sort(), array:union(), base64Decode(), beta:param(), beta:repeating(), bitfield:extractFlagsAsString(), coalesce(), collect(), communityId(), concatArray(), copyEvent(), correlate(), default(), defineTable(), dropEvent(), duration(), end(), eval(), eventFieldCount(), eventInternals(), eventSize(), fieldset(), format(), formatTime(), geography:distance(), geohash(), getField(), hash(), hashMatch(), hashRewrite(), if(), ioc:lookup(), join(), kvParse(), linReg(), lower(), lowercase(), match(), math:arctan2(), math:log2(), math:mod(), math:pow(), math:rad2deg(), math:sinh(), math:spherical2cartesian(), math:sqrt(), math:tan(), math:tanh(), max(), min(), neighbor(), now(), objectArray:eval(), objectArray:exists(), parseCEF(), parseCsv(), parseHexString(), parseInt(), parseJson(), parseLEEF(), parseTimestamp(), parseUri(), parseXml(), partition(), percentile(), readPersistedAggregation(), regex(), replace(), series(), timeChart(), top(), unit:convert(), upper(), writeJson()