Hello
Found the issue as well, only the message is by default exported so I had
to create an extractor to override the default "message" with the full
message
I used the split and index, using {" as splitting characters
Thanks!
Mark
On Sunday, May 31, 2015 at 1:49:07 AM UTC+10, [email protected] wrote:
>
> Hello
>
> I'm using the "production" OVA (not the beta) of Graylog
>
> I noticed that when I try to export the results of a search, the message
> field is trunked, see example below:
>
> The full message is full_message
>
>
>
>
>
> *{"1331892651000, 4776, "Success", "Security",
> "Microsoft-Windows-Security-Auditing", "The computer attempted to validate
> the credentials for an account.Authentication Package:
> MICROSOFT_AUTHENTICATION_PACKAGE_V1_0Logon Account: mr636cSource
> Workstation: INHYIMR636CError Code: 0x0" "}*
> <http://192.168.1.123/search?rangetype=relative&fields=source%2Cmessage&width=1920&relative=3600&from=&to=&q=mr636c#>
> In the exported CSV log I have only this:
>
> *{"1331892651000, 4634, "Success", "Security", "Microsoft-Windows*
>
> Is there anyway to fix this?
>
> Thanks a lot
> Mark
>
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
