Hi all,
there is a Netapp filer logging its messages into graylog (Netapp cDot). When I search for “offline” to find messages about Luns switched offline, I get a list of messages containing offlined Luns.
When however I search for deleted Luns and I search for “destroy”, I get “nothing found” despite there being many log messages about destroyed Luns.
I suspect it is the “str” substring in “destroy” putting the search off. How do I mask this search string to look for what I want? wrapping in apostrophes and " didn’t work.
The documentation only mentions some special characters to be escaped, not “normal” strings.
The log messages look like this:
Aug 30 17:04:21 10.209.149.61 [netappfiler:LUN.offline:notice]: LUN at path /vol/somevolume/{73c826a3-4539-4e4f-8a70-2a7357f85cbc}.aux in volume somevolume (DSID 1051) has been brought offline.
Aug 30 17:04:19 10.209.149.61 [netappfiler:LUN.destroy:info]: LUN at path /vol/somevolume/{cdbb18e0-4da4-4a44-800b-a5ad9e6e0e89}.aux in volume somevolume (DSID 1050) was destroyed.
Thanks in advance!