Documentation: 3.2.3
|  Print Version Contents
This page last updated: 09/23/08 01:09pm

Search modifiers

Use search modifiers to filter searches using tags, or use search modifiers to add the results of a saved search as an argument to a search.

eventtypetag

You can tag event types based on shared attributes. Use eventtypetag to filter your search to include events that have the specified event type tag (or tags).

Syntax

eventtypetag=string

Arguments

string Specify a single tag, or a comma-delimited list of tags.

hosttag

You can create tags for the host (value of the host field) of events with tags. Use hosttag to filter your search to include events that have hosts that match the specified host tag (or tags).

Syntax

hosttag=string

Arguments

string Specify a single tag, or a comma-delimited list of tags.

savedsearch

Adds the text of the saved search to the arguments of the search command. If the saved search contains more than one command (it contains the pipe character), use the savedsearch command instead of the savedsearch modifier.

Syntax

savedsearch=name_of_saved_search

Arguments

name_of_saved_search Specify a saved search.

tag

You can tag events with tags to help you identify them in your terms. Use tag to filter your search to only include events that match the specified tag (or tags).

Syntax

tag=string

Arguments

string Specify a single tag, or a comma-delimited list of tags.
Previous: Modifiers    |    Next: Time modifiers

Comments

No comments have been submitted.

Log in to comment.