Search message not found

Hey. I Want to find messages on Port security in the logs, according to the message ‘HAVEMAC’, I tried different combinations of words, but could not find the log information I needed (see screen)
How can I find all messages with ‘HAVEMAC’?


he @tetesh

/.+HAVEMAC.+/

You want to do a regex search

https://docs.graylog.org/en/3.2/pages/searching/query_language.html

I really recommend to fix the messages - It looks like you send in Cisco Logs that are not seen right - see the month as source field.

See my post about that topic: https://jalogisch.de/2018/working-with-cisco-asa-nexus-on-graylog/