So this is an undocumented (as of yet) method to have graylog filter an input as it feeds the elasticsearch index? If I do a search on the graylog site for drool I get nothing.
On Thursday, April 30, 2015 at 10:43:38 PM UTC-7, temo tsurtsumia wrote: > > import org.graylog2.plugin.Message > > rule "Drop host x" > when > m : Message( source == "10.0.3.x" ) > then > m.setFilterOut(true); > System.out.println( "[Drop host y] : " + m.toString() ); > end > import org.graylog2.plugin.Message > > rule "Drop host y" > when > m : Message( source == "10.0.3.y" ) > then > m.setFilterOut(true); > System.out.println( "[Drop host y] : " + m.toString() ); > end > import org.graylog2.plugin.Message > > rule "Drop host z" > when > m : Message( source == "10.0.3.z" ) > then > m.setFilterOut(true); > System.out.println( "[Drop host z] : " + m.toString() ); > end > > > > > > change host accordingly > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
