Best way to accomplish adding meta to my log data?

(Johnb) #1

Looking to add some meta to the log data for easier searching. For instance, data from servers or a particular office location based on ip space?

(Jochen) #2

You can add arbitrary data within Processing Pipeline rules:

Graylog 2.3.x will also add a generic lookup mechanism to run lookups in external systems, so that you could query your CMDB for item data and add it as additional fields to your messages.

(Johnb) #3

Thank you much. Just wanted to make sure this was the way to do it. :slight_smile: