I’m currently having issues with duplicated messages.
I currently have two Streams
Stream A with Index Set A
Stream B with Index Set B
The idea is that Steam A (using stream rules) first receive the messages.
Then, a pipeline is connected to Stream A to route_to_stream messages that match a condition to Stream B.
The behavior I observed was, the message will be indexed in both IndexSet A and IndexSet B.
The behavior I was hoping is that the message only gets indexed at IndexSet B
I’ve tried several things.
- route_to_stream(Stream B) then drop() on the same rule. however the messages are being dropped on both streams.
- let new_message = clone() then route_to_stream(new_message) then drop() caused the graylog servers to crash.
Do you have any recommendations on how to get the messages to StreamB from StreamA?
Unfortunately, as much as possible we do not want to add stream rules to StreamB .