How to create decorators

Graylog Central (peer support)
1

Hi Folks,

I wanted to check how can i create custom decorators. For example, I would like to apply decorator to a LogonType field (numeric field) and then displace a custom message (like, 2 for network logon,3 for interactive logon, etc.)

I checked syslog decorator but i am not sure how to modify the custom message

Thanks,
Navdeep

2

I personal would write a processing pipeline that is then used as a decorator.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.