Using combinations of keywords, phrases, logical operators, and parentheses, the Dynatrace search query language provides you with complete flexibility over searches through important process-log content.
To return all results, leave the query box blank.
Error AND Module1?2
"Connection refused" OR Timeout
Procedure AND (started OR stopped)
Exception AND NOT repeat*
| Single-word terms
|| Single-word searches help you find individual word occurrences. Searches are case-insensitive. Searched words in log files are defined as strings between any non-alphanumerical or white space character. For example, querying the string
error matches both
|| Phrases are groups of words surrounded by double quotes. Phrases are treated just like single-word terms in queries. When a search phrase consists only of alphanumeric characters
[a-zA-Z0-9], then the query is in fact a single-word term query, so the double quotes
" " can be omitted. You can NOT include any Boolean operators, wildcards, or groupings (see below) inside quoted phrases. Any character included within quotation marks is searched literally. For example,
"what?" returns a match for
what? but not for
"cat and dog"
| Boolean operators
|| Operators can be written in either uppercase or lowercase:
&& Log entry matches when it contains both surrounding strings.
|| Log entry matches when it contains at least one of the surrounding strings.
NOT Log entry matches when it DOES NOT contain a string after
NOT. The logical operator
AND is automatically inserted between single-word terms that are not surrounded by parentheses. For example,
test failed is equal to
test AND failed. Precedence:
test AND failed
error OR failure
( ) can be used to group clauses into sub-queries.
(black OR red) AND label
|| Wildcards can be used to represent a variable or unknown alphanumeric characters in search terms. An asterisk
* can be used to represent any string composed of alphanumeric characters. A question mark
? can be used to represent any single alphanumeric character. Note: Single-character wildcard queries
? are not allowed.