Hello everyone,
I am trying to extract some data from the logs.
I have created a little search that works well:
customergetservice host=MBKBKKSPHTRSP0* source="/var/log/jbossas/standalone/server.log" | transaction RequestId
It links the request and the response from the server by the extracted field RequestId.
However, I am trying to filter only some parameter contained in the field Login:
The login has many possibilities of different values, but it starts with either:
"BBC-*"
"BBF-*"
"BFL-*"
"BCIMR-*"
The login is only in the request, and not in the response.
I am trying to filter by putting the following
customergetservice host=MBKBKKSPHTRSP0* source="/var/log/jbossas/standalone/server.log" | transaction RequestId startswith="BCIMR-*"
However, when I add the StartsWith, everything's broken, as the events are not linked together anymore.
See following comment for example as I can't add more than 2 images per question
... View more