I’m testing graylog. Actually I set a new stream with a two alerts, but with conditions. The first condition is with plugin “correlation” and the second condition is with “Count messages”. I’ve checked that is running with the first match condition (it doesn’t work always) only, the second condition it never works.
I’m having several issues with that.
Do you know if you has this situation? I mean that a stream can work with a one conditions only, I think that in base for my situation.