Hi Arie, the '-' character needs to be escaped since it has a special meaning in the Lucene query syntax, see https://www.graylog2.org/resources/documentation/general/queries for details. You also want to only have exact matches so you have to put the query in double quotes.
The correct query would be *"cbs\-prod"* (including the surrounding quotes). Cheers, Jochen On Tuesday, 13 January 2015 23:27:00 UTC+1, Arie wrote: > > Hi all, > > Maybe I am totally dull, but I am have a problem with search results > > search: cbs\-prod > or > search: "cbs-prod" > > show even cbs-test-app1 in the results, the higlighted part is okay, but > for statistics, > we want an exact match. The search is on a hostname that is in the message > and > with an extractor in a separate field. > > What are we doing wrong? > > thanks,, > > A. > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
