• To perform a free text search, simply enter a text string. For example, if you’re searching web server logs, you could enter to search all fields for the term safari.
• To search for a range of values, you can use the bracketed range syntax, [START_VALUE TO END_VALUE]. For example, to find entries that have 4xx status codes, you could enter status:[400 TO 499].
• To specify more complex search criteria, you can use the Boolean operators AND, , and NOT. For example, to find entries that have 4xx status codes and have an extension of php or html, you could enter .

• ELK for Logs & Metrics: Video