[graylog2] Re: Stream matcher code

2015-02-20 Thread Arie
At leas in 09.3 you can Create a stream rule, and the first possibility on top is the field, after that select regex and in that you put (cvp) On Friday, February 20, 2015 at 3:51:51 PM UTC+1, Maciej Strömich wrote: > > Hi, > > > I'm trying to create a stream which will catch log entries contai

Re: [graylog2] Re: Stream matcher code

2015-02-20 Thread Bernd Ahlers
Maciek, a regex match for a field value is not possible at the moment, sorry. Bernd On 20 February 2015 at 16:13, Arie wrote: > At leas in 09.3 you can > > Create a stream rule, and the first possibility on top is the field, > after that select regex > and in that you put (cvp) > > > > > On Fri

Re: [graylog2] Re: Stream matcher code

2015-02-22 Thread Arie
A I sing this wrong, and is this not what he is asking for? A. Op vrijdag 20 februari 2015 16:30:37 UTC+1 schreef Bernd Ahlers: > > Maciek, > > a regex match for a field value is not poss

Re: [graylog2] Re: Stream matcher code

2015-02-23 Thread Maciej Strömich
Arie, I need to place several fentries in "Field" and not in "Value". Something like: As I said we have several places where this string can be found (depe

Re: [graylog2] Re: Stream matcher code

2015-02-23 Thread Arie
Maciej Thank jou. Now I see, I was searching for these solutions to, but now we store the incomming messages fully, and do the regex on all the data in "complete messages" It is quit a hussle to get it done but it works here. A. On Monday, February 23, 2015 at 9:07:47 AM UTC+1, Maciej Strömi