Hello Fernando,
stream rules work like being AND-concatenated when being matched, this means
that all rules of a stream have to match for a message to be tagged with that
stream. We have finer/more complex matching logic in mind, but not scheduled
for any milestone.
If you are really able to reproduce a scenario where stream rules are matched
in an OR-fashion, please included all necessary steps for us to reproduce it,
including the message data, so we can fix this.
Kr,
Dennis
On 27.06.2014, at 12:12, Fernando <[email protected]> wrote:
> Hi,
>
> I´m using version 0.20.3 and need to apply 2 rules above on a stream.
> Now these rules are working like operator OR, matching any of two rules, but
> i expect operator AND.
> Is this a bug?
> If not, do you can make some option to use operator AND for multiples rules?
>
> Thanks
>
> source must match regular expression ^(?!.*(gw)).*$
>
> facility must match exactly local5
>
> --
> You received this message because you are subscribed to the Google Groups
> "graylog2" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
--
TORCH GmbH
Steckelhörn 11
20457 Hamburg
Tel +49 (0)40-60945200
https://www.torch.sh
Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Hass Chapman, Lennart Koopmann
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
