How can I search NPM syslog for a certain words, mac addresses, or a pattern?
In cli, one can do “show log | include 00:0b:80:90:b2:20” to list all activities for this particular host.
In NPM Syslog, I enter this mac address to either “Message Type” or “Message Pattern”, both came up with empty list. Remove this mac address, then the log will show this mac address (bury in with many logs)
google and found the answer:
to query a mac address, you must enter *<mac-address>* (two * before and after message patern)