Unable to search for substrings that make up a java package

[Giuseppecal (Giuseppe)]

Hi,
we noticed in our Streams we fail to search substrings correctly when the whole word is a package (e.g. com.scffund.xxxx.MyService.myMethodName").

For instance, given the message below:

“2023-01-30 12:01:32,552 INFO TRA1371658 UTEjob com.scffund.xxxx.MyService.myMethodName start - params:[pBatch:com.scffund.batch.Batch : 30805]”

we got “N” results using the following search query:

message:com.scffund.xxxx.MyService.myMethodName OR
message:“com.scffund.xxxx.MyService.myMethodName”

Zero results instead serching by “myMethodName” substring:

message:myMethodName
OR message:“myMethodName”
OR message:"

Thank you
Giuseppe

2. Describe your environment:

• OS Information: Red Hat, Inc. 1.8.0_362 on Linux 4.18.0-425.10.1.el8_7.x86_64

• Package Version: Graylog 4.2.8+c9edd92

3. What steps have you already taken to try and solve the problem?

• We verified that message and full_message are identical
• We excluded any Windows multiline problems (the web application that produces the log is deployed on a Windows server)

Thank you

[gsmith]

Hello @Giuseppecal

I tested this out in my lab.

If you need to get more accurate, perhaps try to use Regex, or create a new field/s for the data you want use