Log insight query - return lines with text 'abcdef' plus the line immediately following it

[GregSmid]

Hi all,

Just wondering if anyone has tried anything like this before.  I'd like to find all lines that contain the text 'abcdef' (for example), plus the line that immediately follows that line.  Filtering for 'abcdef' is easy enough of course, but so far I've been having to check the timestamps on all those lines, clear the filter, and then manually find them based on timestamp to see the line that comes next. It's pretty tedious.

Would some sort of regex work maybe? I was thinking something like this:

abcdef((.*\n){2})

To me it seems like that should find the 'abcdef' string plus all characters after it, until it finds two new lines (the one at the end of the 'abcdef' line plus the new line at the end of the next line). Unfortunately, I can't seem to get any results back.

Anyone have any thoughts?

Thanks!

Greg

[vmovsisyan]

- quick workaround could be to export data, then grep

- maybe you could add this idea for the community to vote? http://loginsight.vmware.com/

[a_nut_in]

Just export the data and then grep -i "abcd" B5 or A5 etc

Example