Regex search in message field

[rosaLux161]

Hello,

because I couldn’t find any info in the documentation, is it possible to use regex search in the message field?

Let’s assume we have a message field containing:

This is number 8748343 just for testing purposes.

Now I have tried all possible search syntax:
message:/This is number .+ just for testing purposes./
message: /This is number .+ just for testing purposes./
message:/This is number .+ just for testing purposes.+/
/This is number .+ just for testing purposes.+/
/This\sis\snumber.+just\sfor\stesting\spurposes.+/

But nothing works. What are my options?

[shoothub]

Graylog by default uses standard analyzer, so i think, that you can’t use your examples.

https://docs.graylog.org/en/4.0/pages/configuration/index_model.html

[rosaLux161]

I don’t understand the connection between regex search and index configuration. ElasticSearch should support regex search.

[dickinsonzach]

This: Search query language — Graylog 4.0.0 documentation

References This: Regexp Query | Elasticsearch Reference [5.6] | Elastic

For help with Elastic Search Regular Expression Syntax

#shrug