i have configured aws plugin and kinesis to pull logs from cloudwatch logs and i see that all the logs which are fetched have the same source name as “aws-raw-logs” i want to have my own source name
You should be able to override the “source” field in the configuration of the input.
Not able to find it anywhere on input configuration
You’re correct. That was an oversight on our side.
I’ve created a PR to change that:
As a workaround, you can create a pipeline rule to override the “source” message field with the set_field() function: http://docs.graylog.org/en/2.3/pages/pipelines.html
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.