# Configuration of streams

**URL:** <https://community.graylog.org/t/configuration-of-streams/16146>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules, route-to-streampl\
**Created:** [July 1, 2020, 7:50am UTC](https://community.graylog.org/t/configuration-of-streams/16146 "2020-07-01T07:50:43Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\
**Post date:** [July 1, 2020, 12:27pm UTC](https://community.graylog.org/t/configuration-of-streams/16146/8 "2020-07-01T12:27:04Z")

</div>

If you want to find fields directly in message field, you can use this pipeline rule:

```auto
rule "msg"
when
    contains(to_string($message.message), "key=") OR 
    contains(to_string($message.message), "cwd=")
then
    route_to_stream(name: "Syslog commands logs");
end

```

---

_[View the full topic](https://community.graylog.org/t/configuration-of-streams/16146)._
