Extract IP from message to new field

[mr_m_cox (Matt)]

Hello All,

How can use extractors to pull just the IP address out of the message field into a new field. I need to do this for GeoLocation to work correctly when processing my SFTP logs.

[jochen]

Please refer to the documentation: http://docs.graylog.org/en/2.2/pages/extractors.html