Hi Flávio, currently there isn't any "conditional" extractor for more complex filtering logic in Graylog2. If you need to apply more complex logic to the message filtering, the most flexible way would be to write some Drools rules, see http://graylog2.org/resources/documentation/general/rewriting.
In general I'd recommend creating a separate input for each application type or application category (whatever fits your usecase) if you have lots of filtering rules. Otherwise each message would run through all the rules which may slow down the overall performance of the system. Cheers, Jochen Am Donnerstag, 28. August 2014 16:41:58 UTC+2 schrieb Flávio Pimenta: > > Hi, > > I started a study and implementation graylog2 about 150 severs and have > the same doubt: I need apply one extractor at a syslog input only when > application_name is httpd. > I read a full documentation and not found it ready.I don't like create a > other Input to extract a message from each application type. > Is plugin a best way to try make this? > > Best Regards, > Flávio Pimenta. > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
