i have configured aws plugin and kinesis to pull logs from cloudwatch logs and i see that all the logs which are fetched have the same source name as “aws-raw-logs” i want to have my own source name
Aws plugin source name
jochen
(Jochen)
#2
You should be able to override the “source” field in the configuration of the input.
jochen
(Jochen)
#4
You’re correct. That was an oversight on our side.
I’ve created a PR to change that:
https://github.com/Graylog2/graylog-plugin-aws/pull/46
As a workaround, you can create a pipeline rule to override the “source” message field with the set_field()
function: http://docs.graylog.org/en/2.3/pages/pipelines.html
system
(system)
closed
#5
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.