Nagios Support Forum

I have a requirement to query and filter for an exact string with nothing more.

The messages has the exact string what I am looking for and some message has more text next to it, but I want to filter for only the string I am looking for.

Any way around this?

Thank You,

Here's a good tutorial on the syntax for Lucene query.
http://www.lucenetutorial.com/lucene-query-syntax.html

However, if you just need to filter out messages with that additional text, and that additional text is reliable, you can put this in your query.

Thanks @mbellerue.

What is I have a lot of messages that I want to filter out?

Here is an example:

Messages:
- NagiosXI Enterprise Server and Network Monitoring Software NagiosXI
- NagiosXI is Enterprise Server and Network Monitoring Software
- NagiosXI

If I have to filter the messages that has just "NagiosXI" and nothing more?

It's not a perfect solution for sure. For your exact example, you can look for common words. If you wanted just the NagiosXI message, you could do this,
Since both of the other messages have Enterprise in them, they should be stopped by the second part of the filter.

Thanks @mbellerue.

This may not necessarily help with my requirement, but may be to an extent.

Does this "-message" accept wild cards?

Yes, it will do wildcards.

Thanks @mbellerue.

You may close this thread.