Search matching by field

Graylog Central (peer support)
1

okay, I’m testing greylog3, and got a search problem by field.
I have the following log-record with an extra field “query”:

_log
_log.png993×720 48.7 KB

So, I need to find all logs with “createAirport”.

I tried several use cases search:

  • query:createAirport
  • query:/createAirport/
  • query:/(createAirport)/
  • query:/ * createAirport * /

And it does not work. Can you please tell me what I missed?

2

Try the below as your search query:

query:(*createAirport*)

You will also need to enable leading wildcard searches in the server.conf file.

3

Yes, I missed that moment. Thanks you.