Error in rule that drop log message


(rajaoui) #1

rule "ignorelogs"
when
has_field(“level”) && to_string($message.level) == "5"
then
drop_message();
end
i create this rules to drop message that contain level 6 but nothing change could you help me ??


(Jochen) #2

You wrote “level 6”, but your rule checks for level == “5”.


(rajaoui) #3

even i change it nothing change


(Jochen) #4

Please provide some example messages and more details about your setup.


(system) #5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.