I would like to add pipeline to exclude automatically some logs ?
I think that I must use pipeline but I don’t know how ! I’m just beginning Graylog
For example I would like to exclude log with such host or source.
For information I receive all logs with JSON format.
Yes, you can use the processing pipelines for that, see http://docs.graylog.org/en/2.3/pages/pipelines.html for details.
You can stop processing messages with the
Ok thanks you for your answer but could you give me one example ?
I 'm not a good dev
I try for drop message :
rule "drop cronjob"
has_field(“application_name”) && to_string($message.application_name) == "CRON"
Is it correct for you ?
Ok thx and for my new pipeline
pipeline "My new pipeline"
stage 1 match all
rule “drop message”;
Why don’t you just try it out instead of asking if it’s fine?
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.