I have a simple search that goes as such:
sessionid=UNIQIESESSIONID "connected to "
This outputs a single logline/event from the Session log contains the string "connected to "
Is there a way I can output this from two different unique session ID's? I thought I could do something like:
sessionid=UNIQIESESSIONID "connected to " OR sessionid=UNIQIESESSIONID "connected to "
But that did not work. Any suggestions?
Try
(sessionid=UNIQIESESSIONID OR sessionid=UNIQIESESSIONID ) "connected to "
Try
(sessionid=UNIQIESESSIONID OR sessionid=UNIQIESESSIONID ) "connected to "
That worked! Thanks!