Drools rules for truncate messages

Graylog Central (peer support)
1

Hi,

does anyone have any experience with Drool’s rules?

At what time will they be processed, before the GELF parse processing or later ?

We have very long applications log messages that produce processing errors. I would like to truncate the messages before the GELF parse processing started. Unfortunately we need the pipeline processor after the message filter chain.

Thanks

2

drools is deprecated and will be removed in future Graylog versions.

Somewhere in this community is the message flow explained in details - the best solution would be to truncate the messages at the sender.

3

We will be trimming the message on the server, but the next release is still under development. In the meantime I would like to use Drools

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.