{"users":[{"id":6800,"username":"dscryber","name":"David Sciuto","avatar_template":"/user_avatar/community.graylog.org/dscryber/{size}/14178_2.png","trust_level":4},{"id":8557,"username":"WavedirectTel","name":"Steve","avatar_template":"/user_avatar/community.graylog.org/wavedirecttel/{size}/11946_2.png","trust_level":1},{"id":7525,"username":"loggingone","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/838e76/{size}.png","trust_level":1},{"id":7602,"username":"dannymccaslin","name":"Danny McCaslin","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/d/41988e/{size}.png","trust_level":1},{"id":9375,"username":"Wine_Merchant","name":"","avatar_template":"/user_avatar/community.graylog.org/wine_merchant/{size}/14596_2.png","trust_level":2},{"id":13667,"username":"bralanak","name":"city smackdown","avatar_template":"/user_avatar/community.graylog.org/bralanak/{size}/18214_2.png","trust_level":1},{"id":9752,"username":"faen","name":"Fa En","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/71e660/{size}.png","trust_level":2},{"id":9568,"username":"hellrazorx64","name":"Hellrazorx64","avatar_template":"/user_avatar/community.graylog.org/hellrazorx64/{size}/13399_2.png","trust_level":1},{"id":3148,"username":"tmacgbay","name":"Tmacgbay","avatar_template":"/user_avatar/community.graylog.org/tmacgbay/{size}/3878_2.png","flair_name":"CAB","flair_group_id":42,"primary_group_name":"CAB","trust_level":4},{"id":5811,"username":"poisedforflight","name":"","avatar_template":"/user_avatar/community.graylog.org/poisedforflight/{size}/6729_2.png","trust_level":1},{"id":13546,"username":"deltab","name":"Ricardo Rocha","avatar_template":"/user_avatar/community.graylog.org/deltab/{size}/18088_2.png","trust_level":0},{"id":12708,"username":"mohammad_ramadan","name":"Mohammad Ramadan","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/b5a626/{size}.png","trust_level":1},{"id":160,"username":"gsmith","name":"GSmith","avatar_template":"/user_avatar/community.graylog.org/gsmith/{size}/1222_2.png","flair_name":"CAB","flair_group_id":42,"primary_group_name":"CAB","trust_level":4},{"id":12483,"username":"brettjouw","name":"Brett","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/b/ccd318/{size}.png","trust_level":1},{"id":8922,"username":"etgraylog1","name":"Evan Tepsic","avatar_template":"/user_avatar/community.graylog.org/etgraylog1/{size}/12528_2.png","flair_name":"Graylog_staff","flair_group_id":41,"primary_group_name":"Graylog_staff","trust_level":4},{"id":12740,"username":"dshirk","name":"David S","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/d/b38774/{size}.png","trust_level":0},{"id":684,"username":"venki","name":"Venkatesh","avatar_template":"/user_avatar/community.graylog.org/venki/{size}/17207_2.png","trust_level":1},{"id":12463,"username":"ulo","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/u/7cd45c/{size}.png","trust_level":1},{"id":12365,"username":"kctan","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/k/439d5e/{size}.png","trust_level":1},{"id":9293,"username":"cdshow","name":"Chris","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/c0e974/{size}.png","trust_level":1},{"id":10739,"username":"subsonicrabbit","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/s/13edae/{size}.png","trust_level":0},{"id":11391,"username":"flep","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/97f17d/{size}.png","trust_level":1},{"id":7295,"username":"patrickmann","name":"Patrick Mann","avatar_template":"/user_avatar/community.graylog.org/patrickmann/{size}/9091_2.png","flair_name":"Graylog_staff","flair_group_id":41,"primary_group_name":"Graylog_staff","trust_level":4},{"id":4289,"username":"bahram","name":"bahram","avatar_template":"/user_avatar/community.graylog.org/bahram/{size}/4874_2.png","trust_level":2},{"id":11922,"username":"martinhoCMA","name":"Martinho","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/{size}.png","trust_level":0},{"id":11914,"username":"mgfranky","name":"mgfranky","avatar_template":"/user_avatar/community.graylog.org/mgfranky/{size}/16488_2.png","trust_level":1},{"id":11816,"username":"Demiurg","name":"Andy","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/d/8491ac/{size}.png","trust_level":1},{"id":11422,"username":"Chris_1","name":"Christoph","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/c/ee7513/{size}.png","trust_level":1},{"id":9661,"username":"louis","name":null,"avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/ecb155/{size}.png","trust_level":1},{"id":9378,"username":"Marvin1","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/ecb155/{size}.png","trust_level":2},{"id":5696,"username":"ihe","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/i/a88e57/{size}.png","flair_name":"CAB","flair_group_id":42,"primary_group_name":"CAB","trust_level":4},{"id":11231,"username":"dandu","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/d/7993a0/{size}.png","trust_level":1},{"id":11134,"username":"aliraxa","name":"Ali Raxa","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/a/58956e/{size}.png","trust_level":1},{"id":9527,"username":"joe.gross","name":"Joe Gross","avatar_template":"/user_avatar/community.graylog.org/joe.gross/{size}/13372_2.png","flair_name":"Graylog_staff","flair_group_id":41,"primary_group_name":"Graylog_staff","admin":true,"moderator":true,"trust_level":4},{"id":11102,"username":"TekieG","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/ce7236/{size}.png","trust_level":0},{"id":8991,"username":"drewmiranda-gl","name":"Drew Miranda","avatar_template":"/user_avatar/community.graylog.org/drewmiranda-gl/{size}/13376_2.png","flair_name":"Graylog_staff","flair_group_id":41,"primary_group_name":"Graylog_staff","trust_level":4},{"id":6629,"username":"davidfungf","name":"Davidfungf","avatar_template":"/user_avatar/community.graylog.org/davidfungf/{size}/7843_2.png","trust_level":1},{"id":1224,"username":"frantz","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/f/dbc845/{size}.png","trust_level":2},{"id":10768,"username":"thomasevig","name":"thomas","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/919ad9/{size}.png","trust_level":1},{"id":5824,"username":"hasturo","name":"Hasturo","avatar_template":"/user_avatar/community.graylog.org/hasturo/{size}/10404_2.png","trust_level":1},{"id":10361,"username":"mk1762","name":"Michele","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/m/4da419/{size}.png","trust_level":0},{"id":7598,"username":"enjet_it","name":"","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/e/41988e/{size}.png","trust_level":1},{"id":4531,"username":"shoothub","name":"Shoothub","avatar_template":"/user_avatar/community.graylog.org/shoothub/{size}/6412_2.png","trust_level":2},{"id":9059,"username":"Linedo","name":"Linden","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/l/c89c15/{size}.png","trust_level":1},{"id":9807,"username":"taibui","name":"Bùi Đức Tài","avatar_template":"https://avatars.discourse-cdn.com/v4/letter/t/e99b99/{size}.png","trust_level":1}],"primary_groups":[{"id":42,"name":"CAB"},{"id":41,"name":"Graylog_staff"}],"flair_groups":[{"id":42,"name":"CAB","flair_url":null,"flair_bg_color":"","flair_color":""},{"id":41,"name":"Graylog_staff","flair_url":null,"flair_bg_color":"","flair_color":""}],"topic_list":{"can_create_topic":false,"filter":"latest","more_topics_url":"/c/templates-and-rules-exchange/16?page=1","per_page":30,"top_tags":[{"id":1,"name":"pipeline-rules","slug":"pipeline-rules"},{"id":10,"name":"regex-special-charac","slug":"regex-special-charac"},{"id":16,"name":"sidecar","slug":"sidecar"},{"id":17,"name":"windows","slug":"windows"},{"id":74,"name":"alert","slug":"alert"},{"id":83,"name":"curl","slug":"curl"},{"id":76,"name":"elastic","slug":"elastic"},{"id":21,"name":"winlogbeat","slug":"winlogbeat"},{"id":100,"name":"automation","slug":"automation"},{"id":99,"name":"capacity_planning","slug":"capacity-planning"},{"id":19,"name":"filebeat-linux","slug":"filebeat-linux"},{"id":73,"name":"html","slug":"html"},{"id":68,"name":"jsonfblx","slug":"jsonfblx"},{"id":79,"name":"key_value","slug":"key-value"},{"id":92,"name":"python","slug":"python"},{"id":11,"name":"route-to-streampl","slug":"route-to-streampl"},{"id":95,"name":"script","slug":"script"},{"id":81,"name":"timestamp","slug":"timestamp"}],"topics":[{"fancy_title":"About the Templates and Rules Exchange category","id":20662,"title":"About the Templates and Rules Exchange category","slug":"about-the-templates-and-rules-exchange-category","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2021-07-28T15:45:45.242Z","last_posted_at":"2021-07-28T15:45:45.253Z","bumped":true,"bumped_at":"2021-07-28T16:05:56.165Z","archetype":"regular","unseen":false,"pinned":true,"unpinned":null,"excerpt":"Member suggested category just added: \nGot a template or rule to share with the Graylog Community?  Here’s the place to post it.  Got a request for a template or rule?  Post it here where peers can share their knowledge &hellip;","visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":892,"like_count":0,"has_summary":false,"last_poster_username":"dscryber","category_id":16,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":6800,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Calix E7 OLT Syslog Pipeline Rule","id":37046,"title":"Calix E7 OLT Syslog Pipeline Rule","slug":"calix-e7-olt-syslog-pipeline-rule","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-03-03T14:31:30.621Z","last_posted_at":"2026-03-03T14:31:30.678Z","bumped":true,"bumped_at":"2026-03-03T14:31:30.678Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":27,"like_count":1,"has_summary":false,"last_poster_username":"WavedirectTel","category_id":19,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":8557,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Pipeline based decorator rules","id":37020,"title":"Pipeline based decorator rules","slug":"pipeline-based-decorator-rules","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2026-02-24T23:58:39.034Z","last_posted_at":"2026-02-24T23:58:39.097Z","bumped":true,"bumped_at":"2026-02-24T23:58:39.097Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":34,"like_count":0,"has_summary":false,"last_poster_username":"loggingone","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":7525,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trying to use Pipelines to extract falues from a field","id":36715,"title":"Trying to use Pipelines to extract falues from a field","slug":"trying-to-use-pipelines-to-extract-falues-from-a-field","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2025-12-09T16:39:29.728Z","last_posted_at":"2025-12-12T20:21:57.402Z","bumped":true,"bumped_at":"2025-12-12T20:21:57.402Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":79,"name":"key_value","slug":"key-value"}],"tags_descriptions":{},"views":130,"like_count":2,"has_summary":false,"last_poster_username":"dannymccaslin","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":7602,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":9375,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Grok works in test with sample data, unable to utilize in Pipeline rule","id":36219,"title":"Grok works in test with sample data, unable to utilize in Pipeline rule","slug":"grok-works-in-test-with-sample-data-unable-to-utilize-in-pipeline-rule","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2025-08-14T10:33:07.229Z","last_posted_at":"2025-08-14T21:26:07.314Z","bumped":true,"bumped_at":"2025-08-14T21:26:07.314Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":115,"like_count":1,"has_summary":false,"last_poster_username":"bralanak","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":13667,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Sonicwall Pipeline Rules","id":27587,"title":"Sonicwall Pipeline Rules","slug":"sonicwall-pipeline-rules","posts_count":20,"reply_count":14,"highest_post_number":20,"image_url":null,"created_at":"2023-02-03T20:17:31.586Z","last_posted_at":"2025-07-03T19:28:32.804Z","bumped":true,"bumped_at":"2025-07-03T19:28:32.804Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":1995,"like_count":12,"has_summary":false,"last_poster_username":"deltab","category_id":19,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":9752,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":9568,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Frequent Poster","user_id":3148,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":5811,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":13546,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Need to compress logs older than month to save space","id":34527,"title":"Need to compress logs older than month to save space","slug":"need-to-compress-logs-older-than-month-to-save-space","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2024-12-25T13:09:52.314Z","last_posted_at":"2024-12-27T06:34:08.618Z","bumped":true,"bumped_at":"2024-12-27T06:34:08.618Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":100,"name":"automation","slug":"automation"},{"id":99,"name":"capacity_planning","slug":"capacity-planning"},{"id":76,"name":"elastic","slug":"elastic"}],"tags_descriptions":{},"views":137,"like_count":0,"has_summary":false,"last_poster_username":"mohammad_ramadan","category_id":21,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":12708,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Rsyslog template","id":34021,"title":"Rsyslog template","slug":"rsyslog-template","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2024-10-31T02:20:25.286Z","last_posted_at":"2024-11-06T18:41:05.360Z","bumped":true,"bumped_at":"2024-11-06T18:41:05.360Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":19,"name":"filebeat-linux","slug":"filebeat-linux"}],"tags_descriptions":{},"views":374,"like_count":2,"has_summary":false,"last_poster_username":"etgraylog1","category_id":21,"op_like_count":1,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":12483,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":8922,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"IP to hostname lookup","id":33927,"title":"IP to hostname lookup","slug":"ip-to-hostname-lookup","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2024-10-23T14:28:16.574Z","last_posted_at":"2024-10-24T17:32:52.489Z","bumped":true,"bumped_at":"2024-10-24T17:32:52.489Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":109,"like_count":0,"has_summary":false,"last_poster_username":"dshirk","category_id":18,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":12740,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Pipeline output printing in array instead of string","id":33565,"title":"Pipeline output printing in array instead of string","slug":"pipeline-output-printing-in-array-instead-of-string","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":"https://us1.discourse-cdn.com/flex016/uploads/graylog/optimized/3X/7/1/71407ed1511b7cd8006131897896f08d2831a5d8_2_1024x486.png","created_at":"2024-09-17T12:54:19.239Z","last_posted_at":"2024-09-18T13:31:22.699Z","bumped":true,"bumped_at":"2024-09-18T13:31:22.699Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":91,"like_count":1,"has_summary":false,"last_poster_username":"venki","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":684,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":9375,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Convert base16 encoded key in readable text","id":33248,"title":"Convert base16 encoded key in readable text","slug":"convert-base16-encoded-key-in-readable-text","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2024-08-13T11:56:53.493Z","last_posted_at":"2024-08-13T11:56:53.554Z","bumped":true,"bumped_at":"2024-08-13T11:56:53.554Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":74,"like_count":0,"has_summary":false,"last_poster_username":"ulo","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":12463,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Masking Sensitive Data on Graylog Pipeline Rules Script","id":33015,"title":"Masking Sensitive Data on Graylog Pipeline Rules Script","slug":"masking-sensitive-data-on-graylog-pipeline-rules-script","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2024-07-17T08:59:20.987Z","last_posted_at":"2024-07-18T03:45:20.276Z","bumped":true,"bumped_at":"2024-07-18T03:45:20.276Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":1,"name":"pipeline-rules","slug":"pipeline-rules"},{"id":10,"name":"regex-special-charac","slug":"regex-special-charac"}],"tags_descriptions":{"pipeline-rules":""},"views":178,"like_count":0,"has_summary":false,"last_poster_username":"kctan","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":12365,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Tracking Print Jobs","id":23138,"title":"Tracking Print Jobs","slug":"tracking-print-jobs","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":"https://us1.discourse-cdn.com/flex016/uploads/graylog/optimized/2X/d/d4a07c34e06ac93685a102e6cc2ee5b45c184f94_2_1024x706.png","created_at":"2022-03-23T16:06:48.666Z","last_posted_at":"2024-04-26T16:36:44.553Z","bumped":true,"bumped_at":"2024-04-26T16:36:44.553Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":16,"name":"sidecar","slug":"sidecar"},{"id":17,"name":"windows","slug":"windows"},{"id":21,"name":"winlogbeat","slug":"winlogbeat"}],"tags_descriptions":{},"views":2932,"like_count":3,"has_summary":false,"last_poster_username":"subsonicrabbit","category_id":21,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":3148,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":9293,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":10739,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Json nested and lsit","id":30637,"title":"Json nested and lsit","slug":"json-nested-and-lsit","posts_count":10,"reply_count":3,"highest_post_number":10,"image_url":"https://us1.discourse-cdn.com/flex016/uploads/graylog/optimized/2X/9/9264cabe9e44b678373d047ae824cc55de9968fe_2_192x1024.jpeg","created_at":"2023-11-11T23:11:44.929Z","last_posted_at":"2024-04-15T22:42:25.617Z","bumped":true,"bumped_at":"2024-04-15T22:42:25.617Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":877,"like_count":2,"has_summary":false,"last_poster_username":"flep","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":11391,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7295,"primary_group_id":41,"flair_group_id":41},{"extras":null,"description":"Recent Poster","user_id":4289,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Problems with greynoise pipeline","id":31958,"title":"Problems with greynoise pipeline","slug":"problems-with-greynoise-pipeline","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":"https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/2/5/25b12598868494981726a1ec78792dc353fcf324.png","created_at":"2024-03-27T08:21:48.381Z","last_posted_at":"2024-03-27T15:11:29.382Z","bumped":true,"bumped_at":"2024-03-27T15:11:29.382Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":1,"name":"pipeline-rules","slug":"pipeline-rules"}],"tags_descriptions":{"pipeline-rules":""},"views":229,"like_count":1,"has_summary":false,"last_poster_username":"martinhoCMA","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":11922,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7295,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Struggling to use parse_json()","id":31905,"title":"Struggling to use parse_json()","slug":"struggling-to-use-parse-json","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2024-03-22T18:25:07.596Z","last_posted_at":"2024-03-25T07:34:23.664Z","bumped":true,"bumped_at":"2024-03-25T07:34:23.664Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":534,"like_count":0,"has_summary":false,"last_poster_username":"patrickmann","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":11914,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":7295,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Strange problem with pipeline","id":31689,"title":"Strange problem with pipeline","slug":"strange-problem-with-pipeline","posts_count":3,"reply_count":1,"highest_post_number":3,"image_url":null,"created_at":"2024-03-04T09:25:24.397Z","last_posted_at":"2024-03-11T14:29:15.217Z","bumped":true,"bumped_at":"2024-03-11T14:29:15.217Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":183,"like_count":0,"has_summary":false,"last_poster_username":"Demiurg","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":11816,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":7295,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Try to remove brackets from string","id":30722,"title":"Try to remove brackets from string","slug":"try-to-remove-brackets-from-string","posts_count":6,"reply_count":2,"highest_post_number":6,"image_url":null,"created_at":"2023-11-17T14:06:53.802Z","last_posted_at":"2023-11-21T22:16:15.734Z","bumped":true,"bumped_at":"2023-11-21T22:16:15.734Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":452,"like_count":1,"has_summary":false,"last_poster_username":"gsmith","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":11422,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"How to test field value using regex? in favor to determ if extractor has to run","id":30738,"title":"How to test field value using regex? in favor to determ if extractor has to run","slug":"how-to-test-field-value-using-regex-in-favor-to-determ-if-extractor-has-to-run","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2023-11-20T12:27:44.877Z","last_posted_at":"2023-11-20T13:41:00.706Z","bumped":true,"bumped_at":"2023-11-20T13:41:00.706Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":10,"name":"regex-special-charac","slug":"regex-special-charac"}],"tags_descriptions":{},"views":302,"like_count":0,"has_summary":false,"last_poster_username":"Wine_Merchant","category_id":21,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":9661,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":9375,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Preliminary storage architecture for logging data","id":30435,"title":"Preliminary storage architecture for logging data","slug":"preliminary-storage-architecture-for-logging-data","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":"https://us1.discourse-cdn.com/flex016/uploads/graylog/optimized/2X/f/fe1b1067c3b909cfb7eaf00a61bd44a0f0e25daf_2_1024x187.jpeg","created_at":"2023-10-24T07:38:36.617Z","last_posted_at":"2023-10-24T15:51:55.211Z","bumped":true,"bumped_at":"2023-10-24T15:51:55.211Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":373,"like_count":0,"has_summary":false,"last_poster_username":"ihe","category_id":21,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":9378,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":5696,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Incorrectly parsed fileds","id":30257,"title":"Incorrectly parsed fileds","slug":"incorrectly-parsed-fileds","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2023-10-05T10:37:17.348Z","last_posted_at":"2023-10-06T04:17:17.000Z","bumped":true,"bumped_at":"2023-10-06T04:22:47.868Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":465,"like_count":0,"has_summary":false,"last_poster_username":"gsmith","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":11231,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Setup a pipeline rules for certain hours 5.1.4","id":30080,"title":"Setup a pipeline rules for certain hours 5.1.4","slug":"setup-a-pipeline-rules-for-certain-hours-5-1-4","posts_count":7,"reply_count":2,"highest_post_number":7,"image_url":null,"created_at":"2023-09-12T12:52:24.418Z","last_posted_at":"2023-09-14T07:53:14.517Z","bumped":true,"bumped_at":"2023-09-14T07:53:14.517Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":95,"name":"script","slug":"script"}],"tags_descriptions":{},"views":474,"like_count":2,"has_summary":false,"last_poster_username":"aliraxa","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":11134,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42},{"extras":null,"description":"Recent Poster","user_id":9527,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Graylog, sidecar, and nginx","id":30015,"title":"Graylog, sidecar, and nginx","slug":"graylog-sidecar-and-nginx","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2023-09-06T02:18:16.224Z","last_posted_at":"2023-09-07T19:55:54.587Z","bumped":true,"bumped_at":"2023-09-07T19:55:54.587Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":744,"like_count":0,"has_summary":false,"last_poster_username":"drewmiranda-gl","category_id":20,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":11102,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":8991,"primary_group_id":41,"flair_group_id":41}]},{"fancy_title":"Graylog Extractor by Regular Expression","id":29955,"title":"Graylog Extractor by Regular Expression","slug":"graylog-extractor-by-regular-expression","posts_count":3,"reply_count":0,"highest_post_number":3,"image_url":null,"created_at":"2023-08-30T14:04:43.079Z","last_posted_at":"2023-09-05T14:12:16.325Z","bumped":true,"bumped_at":"2023-09-05T14:12:16.325Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":10,"name":"regex-special-charac","slug":"regex-special-charac"}],"tags_descriptions":{},"views":457,"like_count":2,"has_summary":false,"last_poster_username":"frantz","category_id":21,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":6629,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":8991,"primary_group_id":41,"flair_group_id":41},{"extras":"latest","description":"Most Recent Poster","user_id":1224,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Trying to configure a json extractor but get nothing to extract message","id":29214,"title":"Trying to configure a json extractor but get nothing to extract message","slug":"trying-to-configure-a-json-extractor-but-get-nothing-to-extract-message","posts_count":2,"reply_count":0,"highest_post_number":2,"image_url":null,"created_at":"2023-06-19T04:52:19.978Z","last_posted_at":"2023-06-20T03:11:20.053Z","bumped":true,"bumped_at":"2023-06-20T03:11:20.053Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":485,"like_count":0,"has_summary":false,"last_poster_username":"gsmith","category_id":21,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":10768,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Problem understanding the use of is_json function","id":28817,"title":"Problem understanding the use of is_json function","slug":"problem-understanding-the-use-of-is-json-function","posts_count":6,"reply_count":3,"highest_post_number":6,"image_url":null,"created_at":"2023-05-17T13:04:38.384Z","last_posted_at":"2023-06-01T21:18:33.936Z","bumped":true,"bumped_at":"2023-06-01T21:18:33.936Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":1,"name":"pipeline-rules","slug":"pipeline-rules"}],"tags_descriptions":{"pipeline-rules":""},"views":827,"like_count":0,"has_summary":false,"last_poster_username":"gsmith","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":5824,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":160,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Add a comma between fileds in pipeline rule","id":28325,"title":"Add a comma between fileds in pipeline rule","slug":"add-a-comma-between-fileds-in-pipeline-rule","posts_count":3,"reply_count":0,"highest_post_number":4,"image_url":null,"created_at":"2023-04-03T09:03:49.049Z","last_posted_at":"2023-04-03T11:57:33.733Z","bumped":true,"bumped_at":"2023-04-03T11:57:33.733Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":372,"like_count":5,"has_summary":false,"last_poster_username":"mk1762","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest","description":"Original Poster, Most Recent Poster","user_id":10361,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":9375,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Graylog ingesting Crowdstrike FDR Logs (refined repost)","id":27725,"title":"Graylog ingesting Crowdstrike FDR Logs (refined repost)","slug":"graylog-ingesting-crowdstrike-fdr-logs-refined-repost","posts_count":4,"reply_count":2,"highest_post_number":4,"image_url":null,"created_at":"2023-02-15T13:36:52.398Z","last_posted_at":"2023-02-16T18:02:03.398Z","bumped":true,"bumped_at":"2023-02-16T18:02:03.398Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":487,"like_count":4,"has_summary":false,"last_poster_username":"tmacgbay","category_id":21,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":7598,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":3148,"primary_group_id":42,"flair_group_id":42}]},{"fancy_title":"Anonymize IPv4 address","id":20685,"title":"Anonymize IPv4 address","slug":"anonymize-ipv4-address","posts_count":4,"reply_count":1,"highest_post_number":4,"image_url":null,"created_at":"2021-07-29T13:38:21.517Z","last_posted_at":"2023-01-28T00:55:11.476Z","bumped":true,"bumped_at":"2023-01-28T00:55:11.476Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[{"id":1,"name":"pipeline-rules","slug":"pipeline-rules"}],"tags_descriptions":{"pipeline-rules":""},"views":1075,"like_count":4,"has_summary":false,"last_poster_username":"dscryber","category_id":19,"op_like_count":2,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":null,"description":"Original Poster","user_id":4531,"primary_group_id":null,"flair_group_id":null},{"extras":null,"description":"Recent Poster","user_id":9059,"primary_group_id":null,"flair_group_id":null},{"extras":"latest","description":"Most Recent Poster","user_id":6800,"primary_group_id":null,"flair_group_id":null}]},{"fancy_title":"Vcenter/ESxi Log Source - Build pineline rule to detect attack based on blacklist URL","id":27272,"title":"Vcenter/ESxi Log Source - Build pineline rule to detect attack based on blacklist URL","slug":"vcenter-esxi-log-source-build-pineline-rule-to-detect-attack-based-on-blacklist-url","posts_count":1,"reply_count":0,"highest_post_number":1,"image_url":null,"created_at":"2023-01-13T10:07:37.499Z","last_posted_at":"2023-01-13T10:07:37.578Z","bumped":true,"bumped_at":"2023-01-13T10:07:37.578Z","archetype":"regular","unseen":false,"pinned":false,"unpinned":null,"visible":true,"closed":false,"archived":false,"bookmarked":null,"liked":null,"tags":[],"tags_descriptions":{},"views":520,"like_count":0,"has_summary":false,"last_poster_username":"taibui","category_id":19,"op_like_count":0,"pinned_globally":false,"featured_link":null,"has_accepted_answer":false,"can_vote":false,"posters":[{"extras":"latest single","description":"Original Poster, Most Recent Poster","user_id":9807,"primary_group_id":null,"flair_group_id":null}]}]}}