Collects logs of 100 people with pppoe accounts, how can I search for logs after the pppoe name?
how are they ingested into Graylog? What fields are available? Did you normalize the logs?
That is nothing that can be answered without any information about your environment.