Inspector logo

Filtering

Inspector filter is designed for human-entered text and is based on Lucene Query Syntax. Filter queries can be saved and reused with a click so better understand how to search in your transactions stream could give you a lot of free time later.

Simple Text

By default if type some text in the search box it will search all transactions that contains your text in the name field.

Use double quote in case your search query contains more than one word:

text or "my text"

Wildcard

Inspector supports single and multiple character wildcard searches within single terms (not within phrase queries).

To perform a single character wildcard search use the "?" symbol.

/api/platform?

To perform a multiple character wildcard search use the "*" symbol.

/api/platform*

You can also use the wildcard searches in the middle of a term.

/api/platforms/*/group

Operators

Boolean operators allow terms to be combined through logic operators. LOG Engine supports AND, OR, NOT operators (Note: operators must be ALL CAPS).

OR

The OR operator is the default conjunction operator. This means that if there is no Boolean operator between two terms, the OR operator is used.

To search for transactions that contain either "GET /" or just "GET" use the query:

"GET /" GET

Or

"GET /" OR GET

AND

The AND operator matches records where both terms exist in the event fields.

GET AND /api

NOT

The NOT operator excludes documents that contain the term after NOT.

/* NOT POST

Escaping Special Characters

You need to consider special characters all the items that could be interfere with syntax:

  • :
  • *
  • ?
  • (
  • )

To escape these character use the \ before the character. For example to search for route:list use the query:

route\:list