Just wondering if anyone could tell me how to use the dash '-' in my search query.
I'm using the saved search "Authentication Event Data Last Week" (which I believe is one of the stock saved searches).
After the search, under Refine Fields, if I expand "User Name" then double-click the username that's just a dash, then go into Search Builder and click the = so that it becomes ( "User Name != - ) then I get no results at all. I tried adding quotes "-" I tried various methods of escaping it ( like \- "\-" and others).
What's the proper way to search for events where the User Name does not contain a dash?