I extracted two fields in the input, and I had changed message filter chain before Pipeline processor. I used debug to check the values and it turned null with the following rule rule “remote session” when true then let debug_message = concat("user_source: ", to_string($message.user_source)); …

Extractor regex fields not appear when simulating pipeline

Howard April 22, 2021, 1:08am 3

I have set message filter chain before pipeline processor

Topic		Replies	Views
Extractor fields not appearing when simulating pipeline Graylog Central (peer support) pipeline-rules , debuggingpl	8	2143	May 12, 2020
Extractors not functioning in Pipeline Processor Graylog Central (peer support) pipeline-rules	7	2726	March 29, 2020
Pipeline simulator and message fields Graylog Central (peer support)	6	4332	April 5, 2018
Graylog: pipeline rule not considering Input's extractor fields Graylog Central (peer support) pipeline-rules , route-to-streampl	2	1539	May 6, 2020
Stream -> pipeline And Input Extractor clarification Graylog Central (peer support) pipeline-rules , route-to-streampl	12	9150	July 3, 2018