Complete novice needs help with setting up filters / query


I am a complete novice when it comes to Graylog. I have just been given access to a dashboard and I want to set up filters / queries.

I have an idea what to do but need help with the language / syntax.

I need to create many filters with machines that use - in their names.

The machines are in OU’s on AD based on model and the asset tags we use in college. These OU’s can contain upto 20 machies


When it add the names into a filter the second part of the names is red

HP840 then red - and red number.

I need to create a filter like hp840-78260 OR hp840-78278 OR etc…for upto the 20 devices.

If i can get an example then I can just copy the filter and edit the machine names.

I hope i have explained myself enough…

Many thanks


Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

When you are executing a search, special characters have to be escaped so searching for HP840-78260 would be HP840\-78260

I think that is what you are looking for… ?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.