Graylog email notification - Split message by space or any token

We have our Graylog setup ready and we are defining our alerts and notifications. We would like to send only particular information in the notification mail, to do so the value of $message.message needs to be converted into an array or Map splitting by space and need to perform whether a string contains a particular value as well. I’m not able to get any document regarding split string or contains in string, so not able to perform these actions as well. Can anybody help me in doing this?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.