Case-Insensitive

Can someone please tell me how I can do case-insensitive queries in Graylog? For example, if I want to search for a username of “joeblow” where any character could be upper or lower case.
Thank you,

I know I can do /[Jj][Oo][Ee][Bb][Ll][Oo][Ww]/ but was hoping for something a little more friendly to type out.
Thank you,

I don’t believe that is possible, the recommendation is to lowercase everything as you ingest it.

1 Like

Thank you! I will give this a try.

set_field(lowercase($message.username)) is your best friend in pipelines. :slight_smile:

1 Like

Thank you very much. This worked like a charm!