How to use $message.message in Pipeline rule GUI

Graylog Central (peer support)
1

1. Describe your incident:
I try to use the GUI to create pipeline rules but I can’t use $message.message in functions like ‘replace’
However it’s possible in the source code editor.
Ho to refer to $message.message in the GUI ?

2. Describe your environment:

  • OS Information: Debian 12 / Docker

  • Package Version: 6.0.7
    Graylog 6.0.7+4779d72 on server (Eclipse Adoptium 17.0.12 on Linux 6.1.0-26-amd64)

  • Service logs, configurations, and environment variables:
    Everything in default values.

3. What steps have you already taken to try and solve the problem?
I searched in the documentation or examples on the internet but I didn’t find anything because most people use the source code editor. However the GUI is handy to simulate the results and test the functions that’s why I need it.

4. How can the community help?
How do you use the GUI to refer to $message.message ?

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.