Search error after upgrade to 3.3.9

spawnzao · January 13, 2021, 2:16pm

Hi, I’m having a problem with my searches after updating the graylog from 3.2.6 to 3.3.9

examples:
source:server AND suricata_description:(*RDP* OR *Terminal*)
application_name:zeek_conn AND history:(*C* OR *c*)

error_query

I can’t fix the searches

tmacgbay · January 14, 2021, 7:05pm

Can we assume that you have made sure that leading wildcards are turned on in your Graylog configuration file?

system · January 28, 2021, 7:05pm

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.