Hi,
i’m trying to create a simple Stream rule, where Logon Type field has to NOT match 3, 4 or 5. What syntax should I use to specify couple of different values? “OR” and “|” is not working…
You should read about regular expressions
https://go2docs.graylog.org/current/making_sense_of_your_log_data/streams.html#FAQs
1 Like
I already did that, but thanks to you, I double checked it and found were was the issue 
“3 | 5” is not working, but “3|5” is working, there has to be no space.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.