From b02d085a522e201aebfd87907b2b129a301d1477 Mon Sep 17 00:00:00 2001 From: Aliaksandr Valialkin Date: Mon, 20 May 2024 04:24:27 +0200 Subject: [PATCH] docs/VictoriaLogs/LogsQL.md: typo fix --- docs/VictoriaLogs/LogsQL.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/VictoriaLogs/LogsQL.md b/docs/VictoriaLogs/LogsQL.md index 52b450d370..d640cce9a0 100644 --- a/docs/VictoriaLogs/LogsQL.md +++ b/docs/VictoriaLogs/LogsQL.md @@ -1124,7 +1124,7 @@ with the biggest number of logs: _time:1d error | extract from _msg "ip= " | stats by (ip) count() logs | sort by (logs) desc limit 10 ``` -It is expected that `_msg` field contains `ip=...` substring, which ends with space. For example, `error from ip=1.2.3.4, user_id=42`. +It is expected that `_msg` field contains `ip=...` substring, which ends with space. For example, `error ip=1.2.3.4 from user_id=42`. If the `| extract ...` pipe is applied to [`_msg` field](https://docs.victoriametrics.com/victorialogs/keyconcepts/#message-field), then the `from _msg` part can be omitted. For example, the following query is equivalent to the previous one: