1 Answer
- Newest
- Most votes
- Most comments
2
Hello,
Can you try with below options
fields @timestamp, @message
| filter @message =~ /*jobName: Viz_UDL_ETL_002*/
(or)
fields @timestamp, @message
| filter strcontains(@message, "jobName: Viz_UDL_ETL_002")
Relevant content
- asked 3 years ago
- asked 2 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 9 months ago
- AWS OFFICIALUpdated a year ago

The first one returned 0 of 0 records, the second one returned 162 of 162 records. The latter query is the correct answer, thank you.