# How to use $message.message in Pipeline rule GUI

**URL:** <https://community.graylog.org/t/how-to-use-message-message-in-pipeline-rule-gui/33796>\
**Category:** Graylog Central (peer support)\
**Tags:** pipeline-rules\
**Created:** [October 9, 2024, 8:25am UTC](https://community.graylog.org/t/how-to-use-message-message-in-pipeline-rule-gui/33796 "2024-10-09T08:25:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pdl-nico](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/pdl-nico/32/17265_2.png) [@pdl-nico](https://community.graylog.org/u/pdl-nico)\
**Post date:** [October 9, 2024, 8:25am UTC](https://community.graylog.org/t/how-to-use-message-message-in-pipeline-rule-gui/33796/1 "2024-10-09T08:25:16Z")

</div>

**1. Describe your incident:**  
I try to use the GUI to create pipeline rules but I can’t use $message.message in functions like ‘replace’  
However it’s possible in the source code editor.  
Ho to refer to $message.message in the GUI ?

**2. Describe your environment:**

- OS Information: Debian 12 / Docker

- Package Version: 6.0.7  
Graylog 6.0.7+4779d72 on server (Eclipse Adoptium 17.0.12 on Linux 6.1.0-26-amd64)

- Service logs, configurations, and environment variables:  
Everything in default values.

**3. What steps have you already taken to try and solve the problem?**  
I searched in the documentation or examples on the internet but I didn’t find anything because most people use the source code editor. However the GUI is handy to simulate the results and test the functions that’s why I need it.

**4. How can the community help?**  
How do you use the GUI to refer to $message.message ?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [October 23, 2024, 8:25am UTC](https://community.graylog.org/t/how-to-use-message-message-in-pipeline-rule-gui/33796/2 "2024-10-23T08:25:45Z")

</div>

Closed on October 23, 2024, 8:25am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
