I am used to seeing a
message that is standard as “the thing that was originally parsed” as well as a standard “message ID” in all my other Graylog inputs based on logs. However, with my shiny new “JSON Path from HTTP Input” I don’t see either. All I do see is my json path expression and result. I want, of course (of course?) to extract the actual value targeted by my json path, so in:
I would like the value stored in elastic search to be
15082for the field
mailgun_events_count. If we want to store that whole shebang as
message, that’s find I guess, but there’s no value in it for me in this application.
When I got to Manage Extractors > Create Extractor, I don’t see how to get at a sample message, bc I don’t see anything in Recent Message, and I don’t have a Message Id to work with.