Dynatrace search query language

Using combinations of keywords, phrases, logical operators, and parentheses, the Dynatrace search query language provides you with complete flexibility over searches through important process-log content.

Sample queries

  • Error AND Module1?2
  • “Connection refused” OR Timeout
  • Procedure AND (started OR stopped)
  • Exception AND NOT repeat*
  • Note: To return all results, leave the query box blank.
Description Example
Single-word terms Single-word searches help you find individual word occurrences. Searches are case-insensitive. Searched words in log files are defined as strings between any non-alphanumerical or white space character. For example, querying the string error matches both abc/error/def and error.html error
Phrases Phrases are groups of words surrounded by double quotes. Phrases are treated just like single-word terms in queries. When a search phrase consists only of alphanumeric characters [a-zA-Z0-9], then the query is in fact a single-word term query, so the double quotes (“ “) can be omitted. You can NOT include any Boolean operators, wildcards, or groupings (see below) inside quoted phrases. Any character included within quotation marks is searched literally. For example, "what?" returns a match for what? but not for whats. "memory fault" "cat and dog"
Boolean operators Operators can be written in either uppercase or lowercase: AND, && Log entry matches when it contains both surrounding strings. `OR, Log entry matches when it contains at least one of the surrounding strings.NOTLog entry matches when it DOES NOT contain a string afterNOT. The logical operatorANDis automatically inserted between single-word terms that are not surrounded by parentheses. For example,test failed == test AND failed. Precedence:NOT,AND,OR` test AND failed error OR failure NOT passed
Grouping Parentheses ( ) can be used to group clauses into sub-queries. (black OR red) AND label
Wildcards _ Wildcards can be used to represent a variable or unknown alphanumeric characters in search terms. An asterisk (*) can be used to represent any string composed of alphanumeric characters. A question mark (?) can be used to represent any single alphanumeric character. Note: Single-character wildcard queries * or ? are not allowed. Start down ex*ed HTTP50? Imp???ible _