If I understand correctly, you have one Graylog server receiving everything, but you want specific data to go to another Graylog server? If that is the case, you can look at setting up a stream rule for those logs and have the stream output to a GELP output pointing to the other Graylog server. This has the added benefit that adding or modifying rules are intuitive and easy.
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9522df9d-f6aa-426e-9e7b-129c2ff4552c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
