Log Insight – AND vs OR

Hi all,

Most of you that use Log Insight will already know this, but I forgot, and several people I asked did not know.  Including one support guy. So here we go.

Whether you are working in central config for agents, or in the Interactive interface this is true.

This means AND

So for a search, or in this case central config of agents, we have host 1 AND host 2 AND host 3 so likely the config or the search is not going to work.

This means OR

In this case, we now see host 1 OR host 2 OR host 3. And the search, or the central config will work.

BTW, I went through the Log Insight docs too and I could not find anything on this.  I suspect that it is there but I could not find it.

Hope that this helps,


=== END ===

Leave a Reply