Hi, I just tested that on Graylog 1.1.6 and Graylog 1.2.0 and I could successfully find the relevant messages with the query source_file:"C\:\\Program Files\\IBM\\WebSphere\\AppServer8\\profiles\\AppSrv01\\logs\\MyServer\\SystemOut.log". It looks like you just forgot to escape the backslash after "IBM" in your original query.
Cheers, Jochen On Monday, 14 September 2015 11:06:57 UTC+2, Claus Koell wrote: > > Hi again ! > > Forgot to escape the ':' character > > source_file:"C\:\\Program > Files\\IBM\WebSphere\\AppServer8\\profiles\\AppSrv01\\logs\\MyServer\\SystemOut.log" > > but nothing wil be found. > > Do i overlook something? > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/b7a8e35b-2d69-4d78-9ce4-518ad61fb972%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
