19

I need to search in my data, which is apache2 log, I need all requests which URL is like so:

http://*&ucode=jn04

It starts with http and ends with &ucode=jn04

I tried this query :

http_referer:"http*&ucode=jn04"

but it doesn't work, and it gives me all URLs which end with the number "4".

I'm using Graylog 2.4.6

informatik01
  • 16,038
  • 10
  • 74
  • 104
Majid Abdolhosseini
  • 2,191
  • 4
  • 31
  • 59

1 Answers1

28

I finally found the answer and my query string which gives me true result is :

http_referer:/https.*jn04/
Majid Abdolhosseini
  • 2,191
  • 4
  • 31
  • 59