With #161601, generating a KQL string expression from an AST node is now possible. It means that instead of replacing token values for the query part in the URL with a regex, we can utilize toKqlExpression method in custom_url_utils.
It should better handle special characters from field values in anomaly records.