Remove_from_stream does not work

Graylog Central (peer support)
1

Hi,
I have this strange behavior about remove_ffrom_stream function.
In my pipeline joined to Stream 1 I have

–STAGE 1
let x = clone_message();
set_field(“cloned”, true);
remove_from_Stream(name:“Stream1”, message x);
route_to_stream(name: “Stream2”, message x);

As i want that the cloned message goes to another stream.

But the cloned message is visible as in the Stream1 as in the Stream2.
Why? Is this a bug or is it something I’m doing wrong?

Thanks
Gianluca

2

I solved changing the rule where condition and adding an additional rule stage

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.