If you surround it with forward slashes (/), it is interpreted as a Perl-compatible regular express (PCRE). Otherwise it is considered a "pattern," which in Nimsoft is mostly a literal string but supports a few special characters - asterisk (*), pipe (|), etc.