Hi,
I'm trying to create a stream which will catch log entries containging "cvp" string. It's not a problem if there's only one field which needs to be checked. I've several places where this value can be found and I'm wondering is it possible to use a regex inside a "Field" input. AFAIK seperate stream rules will use AND and not OR to match messages. I've tried so far: (?:url|message) [url|message] url||message Is this even possible? br, Maciek -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
