Hi Anas, On Tuesday, 15 November 2016 10:49:53 UTC+1, Benbrahim Anass wrote: > > i wanna use graylog just for indexing in real time thoses logs and > configure alarms based on them in real time always >
That's not possible. Graylog is using regular searches to check for alert conditions. You could, however, reduce the retention time for your indices, e. g. only keep messages for 1 day (or whatever is suitable in your environment). Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/30960cce-594c-4ef4-b785-07bc072a863d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
