I believe this is related to how the indexer splits the message data apart into tokens for storage. The search expects to match against complete tokens if you don't use a wildcard in your search pattern. If I were going to look into this for our devs, I'd probably create an extractor to regexp match against Exception stack traces and pull the exception class name into a custom field. Then I can just search for all messages that possess that field, no matter what its content is, or I can search for a specific class match, use the search result analysis tools, etc.
On Wed, Jan 11, 2017 at 2:30 PM, Mic <[email protected]> wrote: > Nobody has this problem ? > > On Monday, August 1, 2016 at 11:30:59 AM UTC-4, Mic wrote: >> >> Hello, we are indexing our stackTrace in the Message part of graylog. >> >> But whenever I want to search in it, it`s really difficult to have a >> result. I need to have the exact package name. >> >> Do I need to enable leading wildcard or there`s another way to use >> graylog ? >> >> Ex: If I search message:NullPointerException it won`t find anything. I >> have to search java.lang.NullPointerException. >> >> Exception in thread "main" java.lang.NullPointerException >> at com.example.myproject.Book.getTitle(Book.java:16) >> at com.example.myproject.Author.getBookTitles(Author.java:25) >> at com.example.myproject.Bootstrap.main(Bootstrap.java:14) >> >> -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/graylog2/b0b79333-a9e2-4211-8c72-3a3e15fcd846%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/b0b79333-a9e2-4211-8c72-3a3e15fcd846%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- No matter what we think of Linux versus FreeBSD, etc., the one thing I really like about Linux is that it has Microsoft worried. Anything that kicks a monopoly in the pants has got to be good for something. - Chris Johnson -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAL5rfGU5XPF-WQgq56TX12nS83xvG-n3Egyq1uZdFgHSMoC3nA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
