How to filter log in kibana

Elastic Stack Kibana
1

Hi everyone,

my goal is to filter this string "sudo egrep -i -r '${jndi:(ldap[s]?|rmi|dns):/[^\n]+' /var/log" in the message of my logs
This is related to the log4j issue.

Thanks in advance to those who help me.

2

Hi

You can do this in Discover by using the Lucene query syntax in the query bar (Not available using KQL) which allows you to use regular expressions like this:

Best,
Matthias

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.