How to set filters for event name

Hello Team,

I am new to graylog,
I have configured AWS Plugin configuration. I can get my Cloudtrail logs.
Now I want to filter the events with names like created things, deleted things etc.
When I am selecting events, I am getting all events like created users, deleted users, create networkacl, delete networkacl etc. I want to make different panels for different types of events.

Could it be possible?

Any help would be highly appreciated.

Thank you.

I am running my setup on docker 17.05.0-ce on ubuntu 16.04, I am not able to see enterprise tab in my console.

Thank you.

if you use the default docker image you need to mount the enterprise plugins into the image and restart graylog to get them.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.