Am Montag, 13. Februar 2017, 23:54:41 schrieb celtar: > agent = (Original Message) : "Mozilla/5.0 (compatible; Googlebot/2.1; > +http://www.google.com/bot.html)"
> 1. Search = Input.... AND agent:*Googlebot* = result none found > 2. Search = Input....AND agent:*Googleb* = result none found > 3. Search = Input.... AND agent:*Google* = graylog result = ok but i think > graylog only found the string google from www.google.com > > I try different ways to search Google* or *Google Google "Googlebot". > Every time it is the same result. Google was found but not the String > Googlbot > > Is there any Syntax failure in searching or maybe it is not possible. > > Do i have to use another Inputfilter (like Logstash)? > > The same problem have we with different search string (not only apache-gelf > module). > > Thanks for helping and have a great day > > :) John Celtar Did you allow leading wildcards for searches in graylog.conf? Did you enable an analyzer for the agent field in the elasticsearch template? Frank -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2445367.505P3CerCN%40studio.engler.invalid. For more options, visit https://groups.google.com/d/optout.
