Hi, thank you for your answer.
Nevertheless this method will not allow to generate charts and for instance merge two graphs for AUDIT_SUCCESS and AUDIT_FAILURE. Regards Le mercredi 14 octobre 2015 11:46:16 UTC+2, Jochen Schalanda a écrit : > > Hi, > > you could extract that string into a dedicated message field and then use > quick values to come up with a pie chart (and data table) for that field. > > > Cheers, > Jochen > > On Wednesday, 14 October 2015 09:49:19 UTC+2, kaiser wrote: >> >> Hello, >> >> I would like to generate charts from string value: "AUDIT_SUCCESS" >> >> I can't do that with strings. >> >> As a consequence, is there a way to set default value for the string >> AUDIT_SUCCESS to 1 with grok pattern? >> >> Regards. >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9643dc88-252d-4bfa-b225-71401e794276%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
