Yes, I browsed through the documentation on that some time ago, and aside from our cluster still being graylog 1.something and thus not compatible with the plugin, the plugin still seems to require that a match be made against specific messages, which are then counted.
All we care about is "Has any device sent more than Y messages (of any type) in Z minutes?" On Thu, Sep 8, 2016 at 6:35 AM, Ben Scott <ben.sc...@cybertill.co.uk> wrote: > Have you had a look at this plugin? > > https://marketplace.graylog.org/addons/0d01a899-138a-4f77- > a9e7-04be4cc5e190 > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/graylog2/e6d9de8d-7a65-4b4b-9217-5979dfdfcc71%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/e6d9de8d-7a65-4b4b-9217-5979dfdfcc71%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- No matter what we think of Linux versus FreeBSD, etc., the one thing I really like about Linux is that it has Microsoft worried. Anything that kicks a monopoly in the pants has got to be good for something. - Chris Johnson -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAL5rfGVmG2fgbOm0zwzdqJ0%2BFM2Grxu-5M2VEk988HE5%3Ds7mkA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.