We've just starting using sumo logic and it is great. As we are still learning the query syntax we have a question that we cannot find the answer of in your docs.
We are trying to use the "matches" operator but it is not very clear what is the supported format of the pattern that it takes. The docs don't really provide a spec, they just show a few examples:
Does "matches" only support wildcard (e.g. "*Macintosh")? We tried feeding it proper regular expressions, but they seem to not work.
Thanks for your help
Please sign in to leave a comment.