Search field for partial data

Graylog Central (peer support)
1

Hello,

is it possible to search for a data in a field?

e.g.; i’m trying to get logs that share the same name, so i tried
file:C:\inetpub\logs\LogFiles\W3SVC1\u_ex180523.log

but didn’t return results… Any idea what went wrong?

also, is it possible to search for a substring in the file field?

Thank you
Mohamed

2

Yes, but you have to escape some characters because they have a meaning in the query language.

See http://docs.graylog.org/en/2.4/pages/queries.html#search-query-language for details.

1 Like
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.