Hello,
I’m having trouble with the Custom Parser. I can’t seem to understand how to use the “Filter” part of it. I think I need to filter down this particular log file, as it has very inconsistent fields from line to line. However, even if I try to filter by the most basic word, nothing shows up. What kind of query language are we supposed to use for the Filter for the Custom Parser?
The filter doesn’t require any specific syntax or language as such, only a string that is present in the logs that you want to apply your custom parsing. It is case sensitive though, so make sure the filter matches the case seen in the logs.
For example: if I want to filter on the word “Defaulting” seen in the first log line here
Neither “defaulting” or “DEFAULTING” work
Setting the filter to “Defaulting” returns that line
