You can access the shell by typing in a key term in the shell input box at the top of each page. Searching in the shell is as easy as typing something like:
Keep in mind that "search" and "graph" take the same command line parameters. If you can search on it, you can graph on it.
If you want to search for a couple of terms, simply type them in after the search command:
search 404 .img
You can force both terms to be found by including an operator like 'AND' in the search:
search 404 AND .img
If you don't want a term returned, then use the 'NOT' operator:
search 404 NOT .png
If you're logging JSON data, field extraction becomes possible and searching is even more powerful. You'll need to use a slightly different syntax to search through your logs.
search json.eggs:fried AND json.toast:butter
search json.responseCode:[500 TO 599]
search json.size:[1024 TO *]
If you have multiple inputs (and you should) you can specify searching for data from just one of them:
search inputname:webheads 404 AND .jpg
Or, if you want to search only a single box sending to a given input you can do:
search ip:10.0.20.203 inputname:webheads 404 AND .jpg
Note: The value following ip: is the IP address of the box sending the data. Loggly also supports machine names and tags to allow further refinement in the search results.