![]() Technically there isn't a way to define case sensitivity in the keyword search expression, you will have to define this with an operator.Īfter the keyword search expression, to search for case sensitive keywords, you can use the parse regex operator. Case sensitive keyword search īy default, keyword expressions are case-insensitive. For example, searching com services will search for com AND services. When you do this, Sumo Logic will imply an "AND" condition to the keyword search. To do this, simply add a space between the terms. To search for multiple keyword values in a message, the best practice is to break the keywords into multiple terms. You can use a wildcard to represent one full term: not a partial term: wildcard ( *) will only represent one individual full term between supplied values, so if additional terms exist between the defined values, the search will return no results.įor example, the keyword com*services will not find the message, because there are periods attempting to be represented by the wildcard. If you change it to have the periods, com.*.services*, the query will return our message, as the * only indicates the individual term of test. If you enter a phrase, or series of keywords, such as an email or IP address, the Sumo Logic search engine looks for the individual indexed terms that appear next to each other. Boolean logic and wildcards enable you to search for multiple terms, express logic about term distribution within messages, and specify partial terms with wildcards: use an asterisk ( *), for zero or more characters, or a question mark ( ?) for a single character.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |