Field Type: keyword

Keywords are text fields with no tokenization. The term that is searched for must exactly match the value in the field; for example, process_name:svchost.exe.

Queries containing wildcards can be submitted with keyword queries.

For example:

process_name:ms*.exe .