Pipeline Rules not working

Graylog Central (peer support)
1

Please can someone help fix this code…It isnt bringing the field amongst the fields to be searched and it didnt throw any error. what am i getting wrong in the syntax?

rule "User Created"
when
  has_field("externalId == 4769")
 then
 set_field(field:"UCreated", value: "Successful");
end
2

Ensure that the order of processing in Configuration is properly set.

Try if the below works:

rule "User Created"
when 
	((has_field("externalId") AND (to_string($message.externalId) == "4769"))
then 
	set_field("UCreated", "Successful");
end

Check the Simulator.

3

Thanks, it worked perfectly well. I tried the code below:

rule "User Created"
when 
	((has_field("externalId") AND (to_string($message.externalId) == "4769")))
then 
	set_field("UCreated", "Successful");
end
4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.