I cannot search StackTrace field with the : but works with =
Works: StackTrace=“Caused by: java.net.SocketTimeoutException: connect timed out”
Don’t work: StackTrace:“Caused by: java.net.SocketTimeoutException: connect timed out”
Use Case: Need to configure graylog alert to send out email alert based on matches in the StackTrace field. Cannot use full_message field as only StackTrace log is currently adequate to determine an issue.
Since graylog alert condition default to : and cannot set it to =, please advise on solution to configure matching alert.
Also, I am using Graylog v2.4.6+ceaa7e4