1. Describe your incident:
I’m trying to extract a number from a field and store it in a new field. But although the regex is OK, the new field is not created in new messages.
2. Describe your environment:
- OS Information: Ubuntu 22.04
- Package Version: Graylog 4.3.8+8c4705e
3. What steps have you already taken to try and solve the problem?
Here is the extractor config. As you can see, the regex is extracting the information (this number code), and the field value matches the regex condition to apply the extractor.
However, the “hits” counter remains zeroed, and the new field “ntErrorCode” is not created in new received messages.
4. How can the community help?
If anyone could tell me if I’m doing something wrong or if I forgot some config to make it happen, I’ll appreciate it.