Not really because when you do
source:hostname Missing assetId*
you are doing OR and not AND. So all messages containing a hostname OR a
Missing assetId* is being searched.
When you add AND then no messages are found when using a wildcard.
On Wednesday, January 28, 2015 at 11:41:51 AM
An the second option I gave, does that work?
We experience exactly the same thing.
On Tuesday, January 27, 2015 at 2:37:50 PM UTC+1, Maciej Strömich wrote:
Hi,
I know that allow_leading_wildcard_searches and it's used to search for
terms like *something, and I know that it can cause
Hi,
such a parameter exist in graylog2.conf, but don't know if it is wise to
use.
allow_leading_wildcard_searches = false
If we are using such searches and it is within an know source or other
qualified field
we use # source:hostname last acc*
hth,,
Arie.
On Monday, January 26, 2015 at
