Groups for event definitions (rules)

Graylog Central (peer support)
1

Hi all!
I write different event definitions (more 50), how can i group them into like folders?
for example:
VPN -vpn rules
Cisco - cisco events rules
e.t.c.

2

Hello,

I dont think you can do that, BUT using a unique naming convention would help, such as something like VPN: Connections, VPN: Discconnect , ETC… so when you want to find a Event Definition just type VPN in the Find and that would list all your VPN Event Definitions.

image

I could be wrong and someone else knows how to do that, If not you could always ask here for a Feature request

Hope that helps.

3

Please comment and/or upvote the existing feature request : Grouping Event Definitions in Folders or Categories · Issue #9429 · Graylog2/graylog2-server · GitHub

2 Likes
4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.