Sort by an extracted custom field

(rob) #1

How may I change sort preference to a custom field I have extracted from the message.
The new field is of type time (real event time) and needed to be extracted by graylog as the original format was a bit funky
I have used the sort graphics over the field name, but this is temporary and doesnt save with search etc

(system) closed #2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.