Hi, After a few hours the rules made effect and also worked backwards. I think this behaviour only occurs when multiple rules are used and after insert a second rule on a existent stream. The second rule take a time to be effective. But´s ok! It is working like i expect.
Thanks! Em segunda-feira, 30 de junho de 2014 04h38min57s UTC-3, Dennis Oelkers escreveu: > > Hello Fernando, > > stream rules work like being AND-concatenated when being matched, this > means that all rules of a stream have to match for a message to be tagged > with that stream. We have finer/more complex matching logic in mind, but > not scheduled for any milestone. > > If you are really able to reproduce a scenario where stream rules are > matched in an OR-fashion, please included all necessary steps for us to > reproduce it, including the message data, so we can fix this. > > Kr, > Dennis > > On 27.06.2014, at 12:12, Fernando <[email protected] <javascript:>> > wrote: > > > Hi, > > > > I´m using version 0.20.3 and need to apply 2 rules above on a stream. > > Now these rules are working like operator OR, matching any of two rules, > but i expect operator AND. > > Is this a bug? > > If not, do you can make some option to use operator AND for multiples > rules? > > > > Thanks > > > > source must match regular expression ^(?!.*(gw)).*$ > > > > facility must match exactly local5 > > > > -- > > You received this message because you are subscribed to the Google > Groups "graylog2" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > > -- > TORCH GmbH > Steckelhörn 11 > 20457 Hamburg > Tel +49 (0)40-60945200 > https://www.torch.sh > > Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 > Geschäftsführer: Hass Chapman, Lennart Koopmann > > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
