All rules pipelines in one rule

[gcolmant (Colmant)]

Hi , i have something to do ,
i have many rules , they are the same but for different host
exemple :

---

rule " set hostname (GXXXXXX Wildix)"
when
has_field(“source”) AND
to_string($message.source) == “XXXXXXXXXXXX”
then
set_field(“source”,“Wildix_CXXXXXX”);
end
or

---

rule " set hostname (CXXXXXX Wildix)"
when
has_field(“source”) AND
to_string($message.source) == “XXXXXXXXXX”
then
set_field(“source”,"Wildix_CXXXXXX ");
end

it is possible to regroup all in one rules ?

Thank you

[Ponet (Jesse Hills)]

A lookup table is probably what you want to use for this.

https://docs.graylog.org/en/latest/pages/lookuptables.html