Re: [graylog2] Re: Stream matcher code

2015-02-23 Thread Maciej Strömich
: At leas in 09.3 you can Create a stream rule, and the first possibility on top is the field, after that select regex and in that you put (cvp) On Friday, February 20, 2015 at 3:51:51 PM UTC+1, Maciej Strömich wrote: Hi, I'm trying to create a stream which

Re: [graylog2] search wildcard in quotes

2015-01-28 Thread Maciej Strömich
. For this type of query you have to specify a default_field AND your contend* search query. The default field could be the input of your messages for example, or any other field that is relied to your search. On Wednesday, January 28, 2015 at 1:24:36 PM UTC+1, Maciej Strömich wrote

[graylog2] Re: search wildcard in quotes

2015-01-28 Thread Maciej Strömich
UTC+1, Arie wrote: An the second option I gave, does that work? We experience exactly the same thing. On Tuesday, January 27, 2015 at 2:37:50 PM UTC+1, Maciej Strömich wrote: Hi, I know that allow_leading_wildcard_searches and it's used to search for terms like *something, and I know

Re: [graylog2] search wildcard in quotes

2015-01-28 Thread Maciej Strömich
. On Tuesday, January 27, 2015 at 2:37:50 PM UTC+1, Maciej Strömich wrote: Hi, I know that allow_leading_wildcard_searches and it's used to search for terms like *something, and I know that it can cause increased memory consumption. My question is strictly connected to the query

[graylog2] search wildcard in quotes

2015-01-26 Thread Maciej Strömich
Hi, can someone elaborate a bit on using wildcard searches inside double quotes in GL? We're running 0.92 and have a case where we need to search for an exact phrase with wildcard in the end and it doesn't work for us. e.g. something like message:Missing assetId* Maybe there's an option