Graylog search contains string

mhndev picture mhndev · Dec 17, 2018 · Viewed 11.7k times · Source

I need to search in my data, which is apache2 log, I need all requests which url is like so :

http://*&ucode=jn04

it starts with http and end with &ucode=jn04

I tried this query :

-http_referer:"http*&ucode=jn04"

but it doesn't work, and It gives me all urls which ends with "4" number.

I'm using gralylog 2.4.6

Answer

mhndev picture mhndev · Dec 17, 2018

I finally found the answer and my query string which gives me true result is :

http_referer:/https.*jn04/