Hello. May I have suggestions on the best way to search for this text which is in the full_message field?
Upload of C:\Export\20180830_Customer_2f76b405-beab-e822-80f9-0050569203gb.xml succeeded, moving to backup
I have wildcard searching enabled but searching for .Customer. yields nothing but works fine here
Any help is appreciated.
when you like to search for special character like :\.you need to mask them with a \ - like documented: http://docs.graylog.org/en/2.4/pages/queries.html
I would advice to use extractor or pipeline to write the information into a single filed and then just search in the field. But that is a blind advice without knowing your data.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
