I have pipeline rule created in graylog to give alert to rule level higher that 11. but still i am getting alert for image loaded alerts why?

Graylog Central (peer support)
2

Hey @adiya_v

Your when statement try something like this…

when
contains(to_string($message.rule_group1), "windows")
then

You can add debug to your pipline to see whats going on then check you Graylog log file

 debug();

Maybe this might help