How can I get all errorsnapshots from all nodes of a specific WebServer?

[Anon Anon]

I need to see all errors from this WebService for all nodes of a clustered monitored application.

 

I've tried to use query historical events but without Success.

 

We would like to use something like this query on the historical query Search:

type:errorSnapshot and message: SOAP*

 

But this isn't working...

 

Any ideas please?

[Sergio Morales Correa]

Hello,

From what I see from Luke, it seems for Erros we don't use the "message" field instead we use the "error" field - see screenshots.

Also it seems the error field is not indexed, this probably the above query didn't work.

 

Can you try using : type:errorSnapshot AND SOAP*

 

I have done a quick test and seems to be working

Example 2: type:errorSnapshot AND "SOAP Fault:(404)Not Found"

Example 3: type:errorSnapshot "mathws.org"

I hope this helps,

Regards,

Sergio