I have a numeric field in my graylog (getting with my logs) but i want it to map with names that is not in my logs. is there any way to achieve the same.
graylog field: wants to map with( that i need to create it is not in logs or anywhere)
user id (is present) username( i want to create) (suppose i have to create file with 1 = sam)
basically i want to give name to that id field and that i have to define by own. please help
lookup tables is was you are looking for!
Thanks for reply. i looks like it will solve my problem.
i’ll try this and update if it works
Is there any command line way to map id’s to name as i have tried the same lookup table but again unlucky.
I did not get your question.
You are not able to modify already stored messages with Graylog - that will be only done on ingest.
The only option you have is using a decorator that will do the lookup on search time, but will not store the result.
unfortunately it isn’t work for me but thanks for your suggestions . here i need one more help from your side as we want to create visualization in gray-log in line format
example :- request per host per second or minute
comparing x-axis to y-axis is it possible with graylog
if you have a new question, please open a new thread and do not highjack your old one.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.