How to Search

• Simple Queries
• Advanced Search Queries
• Special Characters

Simple Queries

There are two ways to perform a search:

• Search Queries
• Search Filters

You can use one or the other, or both at the same time.

Search Queries

To search for any text string in any field in your channel, you can simply enter your search term into the main search input.

Search Filters

If you want to search in a specific column/field, you can make use of a filter. To create a new filter, simply click the Filter icon under the main search input. You can chain multiple filters together, and each additional filter be treated as an AND clause.

In the following example, we are using a search query and a search filter at the same time. The word local can appear anywhere in each record, and the client_ip must equal 35.199.5.117.

Advanced search queries

If you wish to create a more specific search query, then you should make use of the advanced queries, which is based on Lucene Query Syntax.

Single words

You can search for a single word within any field by typing the field name followed by a colon : and then the term you are looking for:

field_name:search_term

Multi-word Terms

For multi word terms, you should enclose the search term in double quotes:

field_name:"my multi word term"

Wildcards

To search for incomplete words you can use a wildcard:

field_name:multi*

Note that wildcard operators only work in queries and not in filters.

Syntax Operators

You can also make use of the following search syntax operators:

• AND - logical AND operator
• OR - logical OR operator

Example

This will find the following event:

{
  "env": "production",
  "message": "Must provide active tenant id",
  "line": 129,
  "stack": [
    {
      "class": "App\Repositories\BaseTenantRepository",
      "function": "getTenantId",
      "args": [],
      ...
      "line": 154
    },
    ...
  ]
}

Whilst it may be quicker to use filters for most search operations, advanced queries provides more flexibility and power. Also, note that wildcard operators only work in queries and not in filters.

Special Characters

To escape search syntax special characters you need to use a backslash "\". For example if you want to search for a specific namespaced class, then the search query should appear as follows:

my_class_name: "App\Repositories\BaseTenantRepository"

instead of

my_class_name: "App\Repositories\BaseTenantRepository"

Current list of special characters:

• AND
• OR
• NOT
• (
• )
• \
• "