I tried search with specific wording but the result is not as expected
source:dps-acsw-fd1.2 AND message:4/0/6
tried also below search wording but still no luck, in fact it has different result with the first one
source:dps-acsw-fd1.2 AND message:4\/0\/6
what should I do to make it specific?
This is cisco syslog and I’m using rsyslog on the graylog server, don’t have any extractor