Hi Peter, what's the order of message processors in both Graylog instances? You can find it on the System / Configurations page in the Message Processors Configuration section.
Cheers, Jochen On Friday, 20 January 2017 10:46:39 UTC+1, Peter Griggs wrote: > > Hi Jochen, > > On the working box the pipeline is processing and extracting the fields > however on the new setup it isn't. I have the rules, piplelines and streams > setup identically. I am probably missing something stupid but have spent a > couple of days working on it and its starting to bug me. > > Here is an image of a log message which is identical to the one on the > working box however this one isn't processing the rules despite it saying > it is being routed through. > > Cheers > > > <https://lh3.googleusercontent.com/-di4unzpw3QM/WIHcfDrzjsI/AAAAAAAAAQ8/rxUDPsXV5IIQN-GU9gf5V6_PEl00YXcygCLcB/s1600/graylog.png> > Pete. > > On Thursday, 19 January 2017 09:34:34 UTC, Jochen Schalanda wrote: >> >> Hi Peter, >> >> On Thursday, 19 January 2017 10:26:15 UTC+1, Peter Griggs wrote: >>> >>> I have two graylog instances setup (these are separate on separate >>> sites) one works fine the other is a mirror setup however the processing is >>> not working. >>> >> >> What does "is not working" mean exactly? >> >> Are there any error messages? What did you do, what did you expect to >> happen, and what actually happened? >> >> Cheers, >> Jochen >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/a460a94f-bf89-40ca-96cb-fd2b8486e00a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
