Alert when there is no logs from particular logsource

Hi all,

can some one help me,

we are receiving logs from different logsource to the graylog. i want to get an alert if there are no logs from any\one LogSource .

Thanks in advance.

what Version of Graylog are you using?

Hi Jan,
Thank you for your response.

currently we are using Graylog 3.0

@plokesh1 sorry to say - with that Version it is not possible.

The new alerting - with correlation engine - can make the requested, but not in 3.0

Thank you,
if you have documentation for correlation engine please share me the URL.

All documentation is given in

BUT we are working on this currently. So we have gaps in that. Our Webinar gives you a nice overview:

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.