Perform the following steps to enable usage of special characters in event fields:
Log in as novell user and open the etc/opt/novell/sentinel/config/configuration.properties file.
Set the indexedLog.tokenizedField.enableSplCharSrch property to true.
Restart Sentinel.