[graylog2] Re: Regex Use in Pipeline Rule

2016-06-02 Thread tokred
Hi Chad, I had a similar issue for which I found a solution: I think the reason for your non-match is that regex() needs the pattern to match fully on the message string. Try to modify your pattern to something like "^.+SomeProc *.**". *@ Jochen:* Could you comment on that? I think the reason

[graylog2] Re: Regex Use in Pipeline Rule

2016-05-30 Thread Jochen Schalanda
Hi Chad, if you're simply looking for "SomeProc" inside the "message" field, why not use the contains() function? Why would that be more cumbersome? Cheers, Jochen On Wednesday, 25 May 2016 23:18:20 UTC+2, Chad Sheets wrote: > > I'm attempting to drop messages according to regular expressions