search fields on logs