Importing Reference Data into stream

Graylog Central (peer support)
1

Hi,
We have a need to enrich the incoming data.
I’d like to know if I can pull data from another external source as part of an enrichment stage in the pipeline.
I haven’t identified a core feature for this, but may have missed it.

It may be that I can pull the external data into a cache object and store in Mongo for example, then use as part of my enrichment. The case would either be to add an extra field as part of a standard lookup, or possibly act on the correlation between a stream field and the lookup.

Any ideas or direction would really be appreciated.

Thanks

2

You might be interested in the lookup table feature coming in Graylog 2.3.0: https://www.graylog.org/blog/94-announcing-graylog-v2-3-0-alpha-2

3

Brilliant, thanks for the link.
It looks to be exactly what we need.
I’ll take it for a spin :slight_smile:

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.