I m doing the following filtering:
beat.hostname:APS01 AND program_name:"deadline"
And I get the results:
Unfortunately, I don't want to include "deadline_balancer" here. When I filter:
"beat.hostname:APS01 AND program_name:"deadline_balancer" it's all good:
Can you please let me know how to accomplish this? The only Info I found in the documentation is:
"To search for an exact string, you need to wrap the string in double quotation marks. Without quotation marks, the search in the example would match any documents containing one of the following words: "Cannot" OR "change" OR "the" OR "info" OR "a" OR "user"."
Thanks in advance!