V
V
Vadim2020-07-21 19:37:20
Regular Expressions
Vadim, 2020-07-21 19:37:20

How to filter Graylog messages in search bar?

Hello everyone,

below is an example from one of the graylog message fields. The message field, which contains the body of the message:
5f1718532f540637445489.png

As you can see, it is quite complex. In the message search bar, I can filter by date, in the simplest way:
message: 2020-07-21*

and all is well. But I can't filter further. For example, I need to filter by the word after info, but the search task is in the form.
message: 2020-07-21*INFO*authorised

does not return anything, although there are such messages when viewed manually! Maybe someone knows what's wrong here?

all the best,
Vadim

Answer the question

In order to leave comments, you need to log in

1 answer(s)
S
Saboteur, 2020-07-21
@saboteur_kiev

So actually in the filter the asterisk character '*' is used as a wildcard or as a quantifier in regular expressions?
If it's a quantifier, then put a dot before the asterisk

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question