sumo query searches - are they case sensitive?

Comments

1 comment

  • Avatar
    Kevin Keech2

    Keywords are not case sensitive; however, the matching operators will be case sensitive. When you say you add "error or Error" are you putting that literally in your query keywords like below?

    _collector=sample_1
    _sourceCategory="sample_app"
    (error or Error)

    Note: If you are doing the following this may return a different set of results. 

    _collector=sample_1
    _sourceCategory="sample_app"
    error or Error

    This is because the first conditions before the OR could be ignored and you would receive any messages that contain the string 'Error". Basically the above would be equal to the following.  

    (_collector=sample_1 AND _sourceCategory="sample_app" AND error)
    OR Error

    0
    Comment actions Permalink

Please sign in to leave a comment.