Hi !
We use the newest version of graylog and we see a feature that we have not expected.
As described in the docu only message, full_message and source will be analyzed so we will be able to use the
wildcard feature on those fields.
We have now a field called application where we store string
values.
We are able to find values with wildcard …
Is this a new feature ?
We have not created any Index templates.
Greets
Claus