Search the logs

The main dashboard search form streams matches from remote servers into a virtualized results view. Labels below match the English UI.

Mode: Simple vs Complex

Mode	When to use
Simple	Free-text / regex Search expression against raw log lines (e.g. `ERROR`, `timeout`, `user_id=123`).
Complex	Build the expression from named regex groups on the selected directory or preset. Disabled until the target has a pattern with named groups.

Complex mode opens Edit groups: enter a value per group. Within a group, || means OR. Different groups combine with AND. Values match as substrings (e.g. 333 matches [JMSConsumer-333]). Applying groups compiles a pattern (max 512 characters) and can seed column filters.

Primary fields

Field	Purpose
Search expression	In Simple mode: the pattern sent to remote search. In Complex mode: shown as chips `group=value`; edit via Edit groups.
Search in	Target to search: a Preset (many directories) or a single Directory (`Server / Name`).
Search	Starts the streaming search. Disabled when the license is missing/expired.
Cancel	Stops an in-progress search.

Advanced options

Expand Advanced options (context and file modification range):

Field	Purpose
Context before (-B)	Extra lines before each match (0–50).
Context after (-A)	Extra lines after each match (0–50).
File modified from	Only consider remote files modified at/after this time.
File modified to	Only consider remote files modified at/before this time.

Defaults use a recent file-modification window so searches stay focused on active log files. Widen the range if rotated files should be included.

Session history

The left Session history sidebar lists previous searches (named from the search pattern). You can reopen a session’s results, start a New search, or delete a session (removes saved query and downloaded results).

While a search runs you see progress (lines downloaded / rate). Truncation badges appear when a remote server hits its max-count limit.

Typical first search