http.request.uri contains "php" || http.content_type == "text/html"
This effectively reads, only log items where:
- The HTTP request contains PHP, OR
- The HTTP response is “text/html”
Useful, dont have to wade through whats an Ajax response, bypass images, etc. One thing that would be nice would be if the area that shows the filter expression was longer!