Hi, you have to use wildcards in your search query to indicate that the string is part of a larger string, i. e. "a539d095b00443cabfcca53c74a65d9e*".
You might have to enable the allow_leading_wildcard_searches <https://github.com/Graylog2/graylog2-server/blob/2.1.2/misc/graylog.conf#L252-L254> setting, but be aware of the performance penalties coming with search queries including leading wildcards. Cheers, Jochen On Friday, 30 December 2016 11:05:55 UTC+1, Inuyasha Super wrote: > > I meet a problem,when i want qurey by this string A: > "a539d095b00443cabfcca53c74a65d9e" > in graylog,and my message B in es is like this: > {"ACCESS_V1.0.0":"2016-12-30T16:53:35.984+0800\u001EWAZ163RUYH2CZ5NL1MXE\u001E11\u001Ea539d095b00443cabfcca53c74a65d9e\u001Ea539d095b00443cabfcca53c74a65d9ea539d095b00443cabfcca53c74a65d9e\u001EMozilla/5.0 > > (Windows NT 6.1; WOW64) AppleWebKit/537.36 > > ps: String A is in the middle of Message B and seperated by ASCII: \u0001E > > But i can't get the result in ths query, how can i resolve this problem? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5c27f34a-7907-458b-81c4-5d5796d02c8d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
