Hi there Sean, Not sure what "logstash" is, but when you search (i.e. for a field) can't you just append/prepend with a wild card?
E.g. Frequently I search: source:123.456.* I think appending wildcards is enabled by default and you'd have to enable prepending: graylog-server.conf: allow_leading_wildcard_searches = true have you tried: tags:nserv* ? Cheers, On Tuesday, May 27, 2014 at 6:02:28 PM UTC-5, Sean Talts wrote: > > Hey all, > > Just set up Graylog2 for the first time and got all of my logs are coming > from logstash :) They have tag field entries like this: "nserv, log," (for > some reason). I'm trying to search for all logs with the nserv tag like so: > `tag:nserv` because the documentation suggests that this will find any logs > with tag fields containing the string "nserv." However, no results come > back! > > The only results that come back from tag searches are exact strings: > `tags:"nserv, log,"`. Any ideas? > > Thanks, > Sean > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
