I configured a “JSON path from HTTP API input” (in Graylog 2.2.2+691b4b7) and can see the received messages. I am wondering if it is possible to index the HTTP response code and response time? I plan to subsequently use these to generate alerts (for bad or delayed responses).
Looking at extractors documentation it sounds like the message needs to contain the information I am looking for before I can use extractors on them. In this case, I do not see HTTP response code or response time even if the complete message in indexed (with “$” as “JSON path of data to extract”). Am I missing something?