Unable to search for substrings that make up a java package

we noticed in our Streams we fail to search substrings correctly when the whole word is a package (e.g. com.scffund.xxxx.MyService.myMethodName").

For instance, given the message below:

“2023-01-30 12:01:32,552 INFO TRA1371658 UTEjob com.scffund.xxxx.MyService.myMethodName start - params:[pBatch:com.scffund.batch.Batch : 30805]”

we got “N” results using the following search query:

message:com.scffund.xxxx.MyService.myMethodName OR

Zero results instead serching by “myMethodName” substring:

OR message:“myMethodName”
OR message:"

Thank you

2. Describe your environment:

  • OS Information: Red Hat, Inc. 1.8.0_362 on Linux 4.18.0-425.10.1.el8_7.x86_64

  • Package Version: Graylog 4.2.8+c9edd92

3. What steps have you already taken to try and solve the problem?

  • We verified that message and full_message are identical
  • We excluded any Windows multiline problems (the web application that produces the log is deployed on a Windows server)

Thank you

Hello @Giuseppecal

I tested this out in my lab.

If you need to get more accurate, perhaps try to use Regex, or create a new field/s for the data you want use

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.