Joanes, Graylog does not modify the messages anymore once they have been stored in Elasticsearch. So I think what you ask for is currently not possible. Sorry.
Regards, Bernd On 25 February 2015 at 15:59, Joanes Errea <[email protected]> wrote: > Hi, > > I would like to be able to manipulate some messages (via REST api or web > app) after receiving them. > For instance, I would like to set a flag to those messages that have been > reviewed/handled. Obviously this cannot be processed on receiving the > message by extractors but at any time. > The question is, does graylog already support this king of post-processing > messages? Any plugin somebody knows about? > > Thanks in advance, > Joanes > > -- > You received this message because you are subscribed to the Google Groups > "graylog2" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog company Steckelhörn 11 20457 Hamburg Germany Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
