What is the correct operator to use in a System Log query for exact matches of the event Type user.authentication.sso?

The operator suitable for performing exact matches in a System Log query is "eq." This operator is used to specify that the value being queried must exactly match the specified string, which in this case is the event type "user.authentication.sso."

Using "eq" ensures that the query will return results where the event type is precisely "user.authentication.sso," with no variations or partial matches. This level of specificity is crucial when you're looking to filter log entries to analyze just that particular kind of event, ensuring accurate data retrieval for tracking or reporting purposes.

Other operators serve different functions, such as checking for non-equality, substring presence, or prefix matching, which may not result in the desired specificity needed for the query. Therefore, using "eq" is the best approach for exact matches in this scenario.