Hi all,
I need an help. I’m using Graylog for VPN target that send me messages like this:
message: “some data that I don’t need - [userid:xxx; action:Log In; …]”
Is there some extractors that I can use to have key - value attributes?
I means: something that is able to set the internal square brackets data as key/value fields?
So that I have the original message and the additional fields extracted like:
userid - xxx
action - Lon In