[graylog2] Re: Dynamic filed names with grok

2016-09-01 Thread Jochen Schalanda
Hi, please describe once again what you're trying to achieve. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups

[graylog2] Re: Dynamic filed names with grok

2016-09-01 Thread AForton
No, it couldn't help. It extracts all the key-value pairs and it's not configurable. четверг, 1 сентября 2016 г., 12:12:20 UTC+3 пользователь Jochen Schalanda написал: > > Hi, > > the converter is called "Key = Value Pairs to Fields" in the drop down. > > Cheers, > Jochen > > On Thursday, 1 Sept

[graylog2] Re: Dynamic filed names with grok

2016-09-01 Thread Jochen Schalanda
Hi, the converter is called "Key = Value Pairs to Fields" in the drop down. Cheers, Jochen On Thursday, 1 September 2016 10:56:28 UTC+2, AForton wrote: > > I currently don't have that converter in converters drop-down-list. Where > to find it? I use > *graylog v2.1.0-beta.2-ffa3355* > четверг,

[graylog2] Re: Dynamic filed names with grok

2016-09-01 Thread AForton
I currently don't have that converter in converters drop-down-list. Where to find it? I use *graylog v2.1.0-beta.2-ffa3355* четверг, 1 сентября 2016 г., 10:44:39 UTC+3 пользователь Jochen Schalanda написал: > > Hi, > > I think that's not possible with Grok, but you could try to use the > Tokeni

[graylog2] Re: Dynamic filed names with grok

2016-09-01 Thread Jochen Schalanda
Hi, I think that's not possible with Grok, but you could try to use the Tokenizer converter (create a Copy Input extractor, then select the Tokenizer converter) for this. Cheers, Jochen On Wednesday, 31 August 2016 14:19:39 UTC+2, AForton wrote: > > Is it possible to extract dynamic field name