Video Screencast Help

Free Form search

Created: 07 Sep 2012 | 3 comments
osm31's picture

Can I do a free form search?

Comments 3 CommentsJump to latest comment

Laurent_c's picture

If you mean a search that will look at all the field at the same time no.

But in template you have some search for hostname/user/ip, that will search in all the relevant fields.

Avkash K's picture

Can you please breif your requirement?

For which product you are looking for free form search?


Avkash K

Tariq Naik's picture

You can search in the raw event field which will allow you to search across all the original event fields provided you have enabled raw event logging. However such a query will take a lot of time unless resticted to a time interval and a particular product. Moreover such a query will not give you accessed to any derived and normalized fields.