Aggregrator plugin REST api document

Hi I am using graylog aggregrator plugin and it fails to create rule via REST api,

Method used: PUT

“repeatNotifications”: false,
“enabled”: true,
“interval”: 15,
“backlog”: 1,
“streamId”: “5b39fb77b273cb07240d9102”,
“numberOfMatches”: 3,
“matchMoreOrEqual”: false,
“name”: “automated_rule_creation”,
“inReport”: true,
“reportSchedules”: [],
“field”: “source_address”,
“query”: “Failed authentication”


  "type": "ApiError",
  "message": "Can not construct instance of, problem: Null rule\n at [Source: org.glassfish.jersey.message.internal.ReaderInterceptorExecutor$UnCloseableInputStream@4e1c9ce6; line: 14, column: 8]"

I tried this from the api browser itself: https://IP/api/api-browser and also with python request module both way I get the same error. seams like some data I miss to send and the error message is not proper to understand what data I miss to send

did you checked the aggregator plugin issues for that?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.