I have a two logs which i need to display them ...
Mar 27, 2013 1:21:43 AM json from session : country name => "India"..........
Mar 27, 2013 1:21:43 AM Authentication : username => "Shiva".........
So i need to display this both things in search ....
this is not working [ source="logs/catalina.out" json from session AND Authentication ]
this spl is not working .... can u guide me ...plz.....
You want to use OR, not AND - AND will look for events matching both filters, OR will look for events matching at least one.