Accessing fields extracted by Extractors in Pipeline Rules


#1

HI, all.

It is possible to access fields extracted by extractors, in pipeline rule?


(Jan Doberstein) #2

It depends on the processing order

http://docs.graylog.org/en/2.2/pages/pipelines/usage.html

But, yes that is possible


#3

Thank you!

One more question. Can i use “nested” conditions?
Something like

when
...
then
    when
    ...
    then
    ...
    end
end

(Jan Doberstein) #4

Hej,

nested conditions are not possible.