Hi All I'd like to search within a field that has been extracted but I cant find the correct syntax to make it work. For example:
I can drill down to this: "source:router AND user:test1 AND url:http\:\/\/www.voweletics.com\/api\/census\/RecordHit\?crumb=f4b06f2a67" But what I want to search for is this: "source:router AND user:test1 AND url:(vowel)" and return all the values that contain "vowel" in the url. This didnt work either: "source:router AND user:test1 AND url:(*vowel*)" Looking for some advice.... ~D -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/91baadb0-30ad-47a3-a582-61d1488a14ff%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
