Best way to search for this text


#1

Hello. May I have suggestions on the best way to search for this text which is in the full_message field?

Upload of C:\Export\20180830_Customer_2f76b405-beab-e822-80f9-0050569203gb.xml succeeded, moving to backup

I have wildcard searching enabled but searching for .Customer. yields nothing but works fine here

Any help is appreciated.


(Jan Doberstein) #2

when you like to search for special character like :\.you need to mask them with a \ - like documented: http://docs.graylog.org/en/2.4/pages/queries.html

I would advice to use extractor or pipeline to write the information into a single filed and then just search in the field. But that is a blind advice without knowing your data.


(system) #3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.