[graylog2] Re: How to access field value in pipeline rules

2016-04-29 Thread Alexander Mamchenkov
Hi Ross, this should work: to_string($message.tag) == "tomcat" at least my case its working On Thursday, April 28, 2016 at 11:56:25 PM UTC+3, Ross wrote: > > Hi- > > I'm trying to create a pipeline to send messages to another stream based > on the application that generated it. In the

[graylog2] External file data lookup in rules

2016-04-27 Thread Alexander Mamchenkov
Hi, As the amount of examples for rule files in graylog is pretty limited, I was wondering on the best way to have some kind of a helper that would read some data from external file (let's say CSV) and then allow filtering messages based on this data. As a basic example, I want to filter out