Event_id field of Graylog

Graylog Central (peer support)
1

Hi!
I was searching the field for “event id” of Graylog and I didn’t found. Do you help me to search the field of event id?? I need this for search or create stream, alerts pipeline…

My query is about this event id:

event_id_graylog

Thanks a lot

2

That is the unique ID for a single message, every message has it’s own unique ID so there’s no generic ID that describes events.

3

Yes but i’ve checked this ID and is same for all events (is same if the event contains same data).

May I use this “unique ID” like in Qradar is QID?

I would use for search , Stream, etc.

Thanks you for reply!

4

http://docs.graylog.org/en/3.0/pages/queries.html
Have you tried to escape the ‘-’ characters?

5

Sorry macko003 but i don’t know that…I don’t understand you reply…I want to search by ID, if its is possible, can be like example the QID of Qradar…is it real in Graylog?

Thanks

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.