Hey Everyone, I’m perplexed here. I feel like this is very simple but It just doesn’t work, I’m totally out of ideas. I’m running a simple search using the AND NOT operator. However, It looks like the AND NOT is ignored in my search results. The part that is confusing to me is that if I change the …

AND operator works AND NOT operator does not

samhut101 (Sam Anderson) October 2, 2018, 6:09pm 5

If you want to search an exact phrase put the search in quotes
Example: message:“user login”

If you want to just search a single word, there is no need for quotes.
Example: message:example.com

Topic		Replies	Views
Graylog 3 search 'AND' query returns none matching results Graylog Central (peer support)	6	879	December 2, 2019
Positive text filter combined with negative text filter? Graylog Central (peer support)	12	653	October 20, 2022
Upgrade from 2.4.6 to 2.5, ES6 - Cannot OR search anymore? Graylog Central (peer support) sidecar , winlogbeat	1	494	January 3, 2019
Graylog pipeline rule syntax errors (I guess?) Graylog Central (peer support) pipeline-rules , debuggingpl , sidecar , winlogbeat	4	1355	October 1, 2018
Boolean value, boolean operators and boolean expression in pipeline condition Graylog Central (peer support)	3	2214	April 11, 2018