I need to search in my data, which is apache2 log, I need all requests which url is like so :
http://*&ucode=jn04
it starts with http and end with &ucode=jn04
I tried this query :
-http_referer:"http*&ucode=jn04"
but it doesn't work, and It gives me all urls which ends with "4" number.
I'm using gralylog 2.4.6
I finally found the answer and my query string which gives me true result is :
http_referer:/https.*jn04/