Does a stream rule on one field with a simple regular expression match really cause a stream to be disabled? The regex is very simple: ^US(QUE|APP)-NA\d{1}-0\d{1}\w?$
This simple expression keeps disabling our stream, and I find it difficult to accept one small expression could do so.
Check the stream and stream rule metrics on the System/Nodes/Metrics page (org.graylog2.plugin.streams.StreamRule.{stream_rule_id}.executionTime and org.graylog2.plugin.streams.Stream.{stream_id}.incomingMessages) for more details about the specific streams/stream rules.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
