Searching Discovery Pattern Log Contents

[Christopher Hub]

I configured a pattern extension which uses a match statement to trigger an expected termination with a specific log message.  I want to locate all discovery targets within a certain time window that have generated this log message. 

The string does not appear in the Discovery Home error UI. I can find the string in the Discovery Pattern Log if I locate a specific IP address record and review its Log Message field or click on the View Log link.  While it proves the string is where I expect it to be, this approach doesn't scale across the enterprise.

When I try to use the filter on the Discovery Pattern Log list view to search for any part of that string, searching simply fails to return anything.  I suspect it's because the Log Message field is a compressed type and doesn't accept normal search criteria.  I tried the URL hack, and it didn't seem to work either.

Is there a trick to searching Discovery Pattern Logs for a specific string match without writing scripts?

[Sumanth16]

Hi @Christopher Hub ,

Please refer to below article:

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0832844

Mark my answer correct & Helpful, if Applicable.

Thanks & Regards,

Sumanth Meda

[Christopher Hub]

I don't see any relevance between this article and my question...  I need to search across all pattern logs in a time frame on the sa_pattern_log table. The logs view on that article's solution is no different than what I have now except it is pre-filtered for a pattern.  I still can't search for a string with the logs using that approach.