`pipeline_output` field is missing or blank. Message will be dropped

[gsmith]

@aali94
I just came across this, perhaps it might help

• Pipeline Rule If/else Trick

EDIT:
In my lab I used this. Note I set it to true

rule "Node01"
when
contains(to_string($message.message), "hrc-vas-bms-tdb01",true)
then
set_field("node01","hrc-vas-bms-tdb01");
end

I found how to do this here.

https://archivedocs.graylog.org/en/3.0/pages/pipelines/functions.html#contains

Hope that helps