Hi all,
I have a simple GROK extractor parsing various DATA fields, assigning custom names to each one.
In the search window, I would like to do a case insensitive search in some of these field, but I can not see how. For example, I have a field called “result” which contain the word “Accepted”. Searching for it, I need to type “result:Accepted”, because something as “result:accepted” will not work.
How can I search for “result:accepted” for any field having something like “Accepted”, “accepteD”, “accEpted”, etc?
be extremely cautious and conservative about the custom index mappings!
So, as a new Graylog user, I wonder if I can search in case insensitive mode, rather tha store the messages themselves all lowercase. Any thoughts on that?