Hello everyone,
i have problem on my graylog 2.3.0 with pipeline processor.
On my last stage i want put the processed message to another stream and keep the original message on the main stream.
rule "RouteToSecurityStream"
when
true
then
let x = clone_message();
route_to_stream(id: "59a5.....................", message: x);
end
With this rule the message not keeped in the source stream.