# Querying logs from the UI with wildcards

**URL:** <https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633>\
**Category:** Get Help\
**Created:** [April 6, 2021, 2:41pm UTC](https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633 "2021-04-06T14:41:16Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![clambert](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/clambert/32/28612_2.png) [@clambert](https://community.auth0.com/u/clambert)\
**Post date:** [April 6, 2021, 2:41pm UTC](https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633/1 "2021-04-06T14:41:16Z")

</div>

I’m trying to filter for log messages with a type such as “Success Silent Auth”. If I read the documentation correctly, then a query such as this should succeed:

`type:*Silent*`

However, you guessed it, this query does not return any data. Neither does this:

`type:*silent*`

Or these:

`type:Su*`  
`type:su*`  
`type:S*`

But, the example from the documentation _does_ succeed:

`type:s*`

Hopefully, someone can help me figure out what I’m missing. 🙏

---

<div class="post-metadata">

**Author:** ![stephanie.chamblee](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/stephanie.chamblee/32/26087_2.png) [@stephanie.chamblee](https://community.auth0.com/u/stephanie.chamblee)\
**Post date:** [April 7, 2021, 4:39pm UTC](https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633/3 "2021-04-07T16:39:45Z")

</div>

Hi @clambert,

Welcome to the Community!

The query syntax used is called Lucene Query Syntax which you can read about here: [Lucene Query Syntax - Lucene Tutorial.com](http://www.lucenetutorial.com/lucene-query-syntax.html)

When you search by type, it actually searches by the event type code instead of the event type label. If you take a look at the raw JSON in one of the logs, you can find the type code of the log type. For “Success Silent Auth” the type code is `ssa`:

 ![Screen Shot 2021-04-07 at 12.34.49 PM](https://global.discourse-cdn.com/auth0/original/3X/c/7/c7cb40e8cc74f6ae52e32536cc9dad1142964c98.png)

The search `type:ssa` will pull up all the successful silent auth logs available to your tenant.

Here is a list of all log type codes: [https://auth0.com/docs/logs/log-event-type-codes](https://auth0.com/docs/logs/log-event-type-codes)

---

<div class="post-metadata">

**Author:** ![clambert](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/clambert/32/28612_2.png) [@clambert](https://community.auth0.com/u/clambert)\
**Post date:** [April 7, 2021, 5:30pm UTC](https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633/4 "2021-04-07T17:30:29Z")

</div>

Ah ha, thank you! I appreciate the quick response.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [April 22, 2021, 5:30pm UTC](https://community.auth0.com/t/querying-logs-from-the-ui-with-wildcards/60633/5 "2021-04-22T17:30:46Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.