How to route the existing messages in All Messages to Stream using rule

Development
1

Dear All,

I have created 2 custom streams with rule based on the field ‘environment’ to isolate the logs based on the environment(Development, Production) in which application is running.

  1. How do route the current message already existing in All Messages based on the rule I configured for each stream. Seems like only the new message after rule is configured is being routed to individual stream and existing message still reside in ‘All Messages’ only.
2

Hi

Not possible

Graylog process the messages at arrivals, so your stream rules will be applied for the future messages.

//In elasticsearch you can modify the messages, so you can route it, but it isn’t a supported way.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.