only pages containing labels

page: .*/labels/.*

matches:

• /transportation/v1/10000/transports/labels/download/123
• /transportation/v1/labels/123
• /transportation/v3/transports/123/labels
• /transportation/v1/10000/transports/labels/123

this following is inaccurate because acts like an OR where any page with v3 or any page with labels shows up

page: /transportation/v3/transports//.*/labels//.*

matches relevant items:

• /transportation/v1/labels/123
• /transportation/v1/10000/transports/labels/download/123

and some irrelevant items:

• /transportation/v1/10000/transports/grant
• /transportation/v3/transports/123
• /transportation/v1/10000/transports/stations/from/A/to/B

Filters for kibana dashboard:

Field my-message contains a the string Failed value

{
  "query": {
    "query_string": {
      "query": "*Failed*",
      "fields": [
        "my-message"
      ],
      "analyze_wildcard": true
    }
  }
}

or wildcard

{
  "query": {
    "wildcard": {
      "my-field": {
        "value": "*Failed*"
      }
    }
  }
}

Field my-message starts with MyCompany.API

{
  "query": {
    "match_phrase_prefix": {
      "my-message": "MyCompany.API"
    }
  }
}

Filters for logzio kibana:

Field Msg.Message contains Filtering

{
  "query": {
    "wildcard": {
      "Msg.Message": {
        "boost": 1,
        "rewrite": "constant_score",
        "value": "*Filtering*"
      }
    }
  }
}

Field Msg.Data.obj.FilteredEntities contains EstimatedDeliveryDateThresholdServiceTypeFilter

{
  "query": {
    "wildcard": {
      "Msg.Data.obj.FilteredEntities": {
        "boost": 1,
        "rewrite": "constant_score",
        "value": "*EstimatedDeliveryDateThresholdServiceTypeFilter*"
      }
    }
  }
}