We are testing the Lookup Table Decorator with no luck,
In the previous Graylog versions, we used this functionality without any problem, but in Graylog 3.2.4, we can’t see the Decorator fields anywhere (Search, Dashboard, etc).
We made a Lookup Table Decorator (the Lookup Table is a DNS Resolution one), to obtain the domain for an IP (SourceIP/DestinationIP -> Decorated SourceHostName/DestinationHostName):
But we can’t see the Decorator field on Search:
Are we missing something?
We even tried to set a test string to SourceHostName/DestinationHostName in the Lookup Table if the resolved domain is null, to try if the field appear.
Anybody with the same problem?
Thanks in advance.
the decorator will make the field visible in the data table only.
I’m already tried to add the field in a table. In fact, is the second screenshot of my post. I can’t see the decorator fields anywere. I already used decorator fields in old versions of Graylog without any problem, but I can’t see the decorator fields in any place in this version after I configured them.
just created this little gif that shows how they are shown and where to configure the decorators.
Thanks jan, with your “recipe” now I can see the decorator field in the Table view:
But I have additional questions, or maybe there are a few bugs in the interface:
Sorry for all the large explanation, and for my english.
Thanks in advance for your help.
no worry - if that worked different before - means you had been able to select the decorator to be displayed in the table few - this is not possible current.
You might want to create a feature request for that over at github:
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.