I’m trying to use pipelines for the very first time! Fun.
I have an input called
vpn-msgs-5004. I can filter on these message with:
I have a Stream called
ASA_AnyConnect. It has one matching rule:
gl2_source_input must match exactly 60d1d5d5f611a86add34edac
The system shows I’m getting about 3,000 messages per second on this stream. No problem so far. The stream is configured to Remove matches from ‘All messages’ stream.
I have a pipeline called ASA_Pipeline. It is connected to the ASA_AnyConnect stream. I have one Stage and it has only one rule. It’s a very simple setup.
But the UI shows there are no messages hitting the ASA_Pipeline and the rule is not getting hit.
What did I miss? I’m sure this is user error, but I’m green on the pipeline system.
Thank you for your help.
- Graylog 4.0.7
- MongoDB 4.2.14
- Elasticsearch 7.10.2