sumo query searches - are they case sensitive?


1 comment

  • Avatar
    Kevin Keech

    Keywords are not case sensitive; however, the matching operators will be case sensitive. When you say you add "error or Error" are you putting that literally in your query keywords like below?

    (error or Error)

    Note: If you are doing the following this may return a different set of results. 

    error or Error

    This is because the first conditions before the OR could be ignored and you would receive any messages that contain the string 'Error". Basically the above would be equal to the following.  

    (_collector=sample_1 AND _sourceCategory="sample_app" AND error)
    OR Error

    Comment actions Permalink

Please sign in to leave a comment.