Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question. Don’t forget to select tags to help index your topic! 1. Describe your incident: Hello all, I want to display events only between 20 and 6 o’c…

First off have you tried just writing the values of the hour to some log messages (move your functions from when to then) and make sure the values are being calculated in the way you would expect.

How can I determine if the values are being handled correctly?

Set the when clause to true so the rule always runs then in then do a set_field(“hourofday”, $message.timestamp.hourofday) then you can manually check what hours are being written so you can rule out any errors.

Interestingly, nothing strikes with the script. But here it rule “Between 12 PM and 6 AM” when ( to_long(to_date($message.timestamp, “Europe/Berlin”).hourOfDay) >= 0 AND to_long(to_date($message.timestamp, “Europe/Berlin”).hourOfDay) <= 6 ) OR ( to_long(to_date($message.timestamp, “Europe/Berl…

Hey @Tobixz I did something similar awhile back. Maybe this might help. [image] User logged in Outside Business Hours Pipeline Rules I have to give respect to @jan for showing me this. This became the most importent Pipeline we use in multiply environments. rule "Betwee…

No, unfortunately, this still does not work.

hey, By chance if you go to system → configuration → message processors Does the order look something like this? Message Filter Chain Pipeline Processor <-- Having this after Message Filter Chain might help. AWS Instance Name Lookup Stream Rule Processor GeoIP Resolver Can I ask [image…

OK i put together something more complete. lack of information makes this hard to troubleshoot. Test Example. 1.Create a stream for users logging in. Windows: Users logon with rule for Event ID 4624. 2.Attache pipeline to that stream Stage 1 has your rule “Between 12 PM and 6 AM” Stage 2 h…

Night Alarm spefic hours

Graylog Central (peer support)

gsmith (GSmith) October 24, 2023, 5:03am 6

Hey @Tobixz

I did something similar awhile back. Maybe this might help.

Topic		Replies	Views
Setup a pipeline rules for certain hours 5.1.4 Pipeline Rules script	6	423	September 14, 2023
See all logs outside business hours Graylog Central (peer support) pipeline-rules	9	1970	May 12, 2021
Events based on day: M-F time: lt 6am OR gt 6pm Graylog Central (peer support) pipeline-rules	3	543	March 19, 2021
Time based alerts Graylog Central (peer support) pipeline-rules	4	1854	October 26, 2021
User logged in Outside Business Hours Pipeline Rules pipeline-rules , route-to-streampl	0	1811	July 29, 2021

Night Alarm spefic hours

Related topics