I am not exactly sure how to trouble-shoot this issue, but within my Graylog server, I want to be able to find all instances of 404 errors. So I constructed my search query like this:
source:libdig13.library.vanderbilt.edu and response:404
But my results do not reflect this:
Timestamp source response
2017-11-28 12:59:13.231 libdig13.library.vanderbilt.edu 404
71.15.223.139 - - [25/Nov/2017:15:50:53 -0600] "GET /apple-touch-icon.png HTTP/1.1" 404 18509
2017-11-28 12:59:13.230 libdig13.library.vanderbilt.edu 200
129.59.151.61 - - [25/Nov/2017:15:50:55 -0600] "GET / HTTP/1.1" 200 40374
2017-11-28 12:59:13.230 libvm11.library.vanderbilt.edu 404
66.249.64.138 - - [28/Nov/2017:00:42:54 -0600] "GET /ojs/index.php/vurj/article/view/2733/contact.php HTTP/1.1" 404 246
2017-11-28 12:59:13.230 libdig13.library.vanderbilt.edu 200
10.1.140.88 - - [25/Nov/2017:15:50:55 -0600] "GET /biomedical/throughtime/items/show/11645 HTTP/1.0" 200 5604
How can I get accurate search results from my queries? I mean, this is pointless if I am unable to search to narrow down my data sets.