Simple Search Examples

Searches in all logs for log events that contain the exact phrase error is not caused by database.

Note: Quotes are usually used when the search term/phrase contains a saved word or one of the following key words used by the search syntax: ( ) = and or not in * ?

If this search query would not be enclosed in quotes, it would be misinterpreted as (error is) not (caused by database).

Note: The ? symbol stands for any single character that appears in its location in the term; for example:7030, 7031, and 703A. The ? symbol can be placed anywhere in the search term (i.e. ?703, 70?3, 703?).

Searches for events containing error and in the log field method a word which contains the text java.lang.

Note: A log field named method is required.

Searches the log field priority for the value FATAL.

Note: A log field named priority is required.

Searches the log field message for an empty value.

Note: A log field named message is required.

Searches the log field message for a nonempty value.

Note: A log field named message is required.

Searches for log events that contain error and the word connection in the log field message.

Note: A log field named message is required. 

Searches for log events that contain error and do not contain NullPointerException in the log field message.

Note: A log field named message is required.

Searches in all logs for log events in which the numeric value in column lineNumber is less than 1000. 

Note: A numeric log field named lineNumber is required. Additional numeric operators: >  =  !=

Searches in all logs that are named Application, for all log events.

Note: The * can be replaced with any valid search query.

Searches in all logs that are named NAME, for all log events.

Note: The * can be replaced with any valid search query.

Searches in all folders that are named NAME, for all log events.

Note: The * can be replaced with any valid search query.

Searches in all applications that are named NAME (provided the application is tagged), for all log events.

Note: The * can be replaced with any valid search query.

Searches in all servers that are named NAME, for all log events.

Note: The * can be replaced with any valid search query.

Searches in all logs that are named Application and are located under folders that are named Windows Event Logs, for all log events.

Note: All types of selectors can be combined, i.e. in log.NAME in server.NAME, in folder.NAME in application.NAME, and more.

regexp: \d\d\d

Regular expression usage – search for a 3 digit number.