Can someone please tell me how I can do case-insensitive queries in Graylog? For example, if I want to search for a username of “joeblow” where any character could be upper or lower case. Thank you,

Case-Insensitive

BlueTeamNinja (aBe) July 8, 2019, 2:37pm 5

set_field(lowercase($message.username)) is your best friend in pipelines.

3 Likes