Seems like it, I get hits for posts that is not containing "duration" at all
Example:
2020-06-04 08:41:53,995 INFO com.Logger {
"origin" : "remote",
"type" : "request",
"correlation" : "84e110da7e8b37e6",
"protocol" : "HTTP/1.1",
"method" : "GET",
"uri" : "http://myuri/orders/30070834",
"body" : ""
}
source="/opt/apps/spring-boot/customer-order-data-bowmore-prod/log/communication.log"
| rex "\"duration\" : (?<duration>\d+)"
| rex "\"correlation\" : \"(?<correlation>[^\"]+)"
| search duration=protocol
... View more