# Rule matching against a long list of values?

**URL:** <https://community.graylog.org/t/rule-matching-against-a-long-list-of-values/242>\
**Category:** Graylog Central (peer support)\
**Created:** [February 26, 2017, 7:31pm UTC](https://community.graylog.org/t/rule-matching-against-a-long-list-of-values/242 "2017-02-26T19:31:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![CrocoGator](https://avatars.discourse-cdn.com/v4/letter/c/439d5e/32.png) [@CrocoGator](https://community.graylog.org/u/CrocoGator)\
**Post date:** [February 26, 2017, 7:31pm UTC](https://community.graylog.org/t/rule-matching-against-a-long-list-of-values/242/1 "2017-02-26T19:31:44Z")

</div>

I need sort syslogs into about 5 categories based on a field (eg. “abc=”) for which there are about a thousand specific potential integer values. The only way I know would be a lot of OR statements, is there a more efficient way? Thank you.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [February 26, 2017, 10:31pm UTC](https://community.graylog.org/t/rule-matching-against-a-long-list-of-values/242/2 "2017-02-26T22:31:54Z")

</div>

Future versions of Graylog will include the possibility to implement lookups on different sources, but currently that’s not supported.