short answer: No. Its probably on the wishlist - for me as well.
If you can make the source system log the information in on line its possible with Drools rules. It should also be possible with a 3rd party pre-prossesor like logstash, which can receive the events and put them as GELF directly into graylog2. I have used this in the past for concatenating java stackstraces and the like. Brgds. Martin On Monday, 13 October 2014 22:23:54 UTC+2, smgo...@gmail.com wrote: > > My need is to correlate two events for following purposes > 1. find the duration from event 1 to event 2 like user logged in at time 1 > and user logged out at time 2 - duration user was connected (t2-t1) > 2. Secondly, event A has part of the information and part of the > information is coming in event B - which the two together makes a full > event. > > So in a nutshell is there some event correlation facility available in > graylog2 - log analysis. Or how should I go about doing this with graylog2 > 0.90 version. > > I was looking into Drools Fusion for event processing - but not getting > anywhere with that! > > Thanks > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
