Hi Rayees, On Wednesday, 8 February 2017 17:38:56 UTC+1, Rayees Namathponnan wrote: > > Suppose i have defined 10 extractors and if any messages comes to graylog > this go trough all the 10 extractors ? >
This depends on your configuration and if the preconditions for these extractors have been met, but it's possible that all 10 extractors have to run for each message. I am performing some test in graylog and see how graylog behave if i add > more extractor, and want to check alert performance wrt to number of > extractor > Usually you would create multiple inputs for messages with vastly different requirements to run extractors, so that not all extractors have to run for all ingested messages. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/01c71c04-d8bd-4283-ac8e-16f6926932a2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
