Is there any way to do a boolean search on syslog messages in Orion?
For example I want to search my syslogs for a message that contains "1.1.1.1" and "2.2.2.2". Anyone know how to accomplish this?
For this specific example, you can use %1.1.1.1%2.2.2.2.2% in the message filter. Not sure what the right syntax would be if you wanted OR.
That's like using *1.1.1.1*2.2.2.2*. The problem with that is it's position sensitive. meaning it wont find any message where the 2.2.2.2 is in front of 1.1.1.1. I keep getting an "Unexpected Website Error" when I search in reverse. Not sure if it's because its not finding anything and times out or some core problem with the web site.
I just tried a search on 1.1.1.1 and it gave me a blank page (as expected) but as soon as I searched *1.1.1.1* it returned some info. No website error. So I guess the software does not like the *1.1.1.1*2.2.2.2*.